Kevin Marriott, senior manager of at cybersecurity firm Immersive, said Tea's update will be "concerning for users who have shared personal details, addresses, and meet-up locations".
"The fact that criminals potentially have both images and the associated account's direct messages should raise the level of concern among users."
Mr Marriott said users should remain vigilant as they wait to see what hackers plan to do with the stolen information.
Tea lets women check whether potential partners are married or registered sex offenders as well as run reverse image searches to protect against "catfishing", where people use fake online identities.
One of the most controversial aspects of Tea is that it allows women to share information on men they have dated to "avoid red flags" - potentially abusive behaviours - but also highlight those with "green flag" qualities.
It previously revealed that hackers had accessed 72,000 images submitted by its users.
Some included images of women holding photo identification for verification purposes, which Tea's own privacy policy promises are "deleted immediately" after authentication.
Tea said the breach affected members who signed up before February 2024.
The app has recently experienced a surge in popularity - as well as criticism from some who claim it is anti-men.