Home / Technology / Supabase Leaks Sensitive Data: 16,000 Databases Exposed
Supabase Leaks Sensitive Data: 16,000 Databases Exposed
25 Sep
Summary
- Cybersecurity firm UpGuard discovered approximately 16,000 Supabase databases exposed.
- Exposed data includes names, addresses, phone numbers, and passwords.
- The findings highlight security risks in AI-generated code and app misconfigurations.
Thousands of databases hosted on the development platform Supabase have been found to expose sensitive personal information to the public web, according to new research by UpGuard. The cybersecurity firm identified approximately 16,000 databases where personal data was accessible.
These exposures include names, addresses, phone numbers, and user passwords, with some databases containing authentication tokens. The data originates from diverse projects, ranging from private conversations on an adult streaming site to license plates from a U.S. valet service and contact information for an immigration service.
The findings underscore how AI-driven development can lead to security flaws and data leaks through misconfigurations. While many exposed datasets are linked to the United States, UpGuard emphasizes this is a worldwide issue.
Supabase acknowledges security as a shared responsibility, stating they provide secure defaults while customers manage their project configurations. The company has implemented platform security enhancements over time.
