UpGuard finds personal data exposed in 16,000 Supabase databases
People whose records are in affected apps may face a privacy risk, while Supabase says customers configure their projects.
UpGuard found that around 16,000 databases hosted on Supabase had at least some personal information accessible to the public, a concern for teams using the platform to store app data. The exposed material included names, addresses, phone numbers and user passwords; the researchers found fewer passwords and authentication tokens. UpGuard said the findings illustrate how basic setup mistakes in AI-built apps can expose sensitive records. Most of the affected datasets appeared to be in the United States, but UpGuard said the issue is global. Supabase said it provides secure defaults and tools, while customers configure their projects, and that it notifies affected customers when it finds security issues.
Why it matters
For people whose records are in affected apps, the concern is whether their personal details have reached a public audience. That makes project configuration consequential: Supabase says customers configure their projects and it notifies them when it discovers security issues.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.