Some Supabase customers are publicly exposing reams of people’s data to the web
techcrunch ·
Cybersecurity firm UpGuard has discovered that approximately 16,000 databases hosted on the Supabase platform are exposing sensitive personal data to the public internet. The exposed information includes names, addresses, phone numbers, and user passwords linked to various applications. These breaches highlight security flaws often resulting from misconfigurations in apps built using AI-driven "vibe-coding" tools. Specific incidents involve leaked data from an Indian adult streaming site, a U.S. valet service, and an African government consulate. Supabase’s Chief Information Security Officer stated that while the company provides secure defaults, security remains a shared responsibility with customers who control their configurations. The findings underscore a growing global trend of data exposure as more developers rely on rapid AI-assisted development platforms. Although most affected datasets appear to be located in the United States, the issue is recognized as worldwide.
techcrunch