Some Supabase customers are publicly exposing reams of people’s data to the web

UpGuard identified about 16,000 Supabase-hosted databases that exposed personal data, including names, addresses, phone numbers, passwords, and authentication tokens. The leaks contained private conversations from an Indian adult streaming site, thousands of U.S. license plates, immigration service contacts, an African consulate database, and a virtual SIM farm used for phishing. Supabase claims its platform offers secure defaults, but the findings highlight the necessity for developers to configure databases correctly.