Some Supabase customers are publicly exposing reams of people's data to the web
5 hours ago
- UpGuard security research found approximately 16,000 Supabase-hosted databases exposing sensitive personal data, including names, addresses, phone numbers, and passwords.
- The exposed data spans multiple sectors and locations, such as sex worker conversations, US valet license plates, immigration contacts, and an African government consulate in France.
- Data breaches are linked to basic misconfigurations and security flaws, exacerbated by the rise of AI vibe-coding apps that often lack proper security configuration.
- Supabase asserts its databases are 'secure by default' but emphasizes shared security responsibility, notifying customers of issues when discovered.