Security research reveals exposed databases on Supabase platform

Sep 25, 2026

AI Summary

A cybersecurity firm found that approximately 16,000 databases hosted by Supabase are exposing sensitive personal information to the public internet. This issue highlights the risks associated with misconfigurations in databases, particularly as the use of AI tools for app development increases.

UpGuard's research identified around 16,000 databases on Supabase with exposed personal data, including names, addresses, phone numbers, and some passwords.
The findings indicate that misconfigurations in databases can lead to significant data breaches, with examples including sensitive conversations, license plate information, and immigration service contacts.
Supabase, which recently reached a $10 billion valuation, has faced criticism regarding user security and the handling of exposed data.
The majority of the exposed datasets are located in the United States, but the issue is global.
Supabase's Chief Information Security Officer stated that security is a shared responsibility and emphasized the company's commitment to improving security measures and defaults for users.

data privacysecurityai applicationsuser dataexposure

Security research reveals exposed databases on Supabase platform

Related Stories

AI's Limitations Highlight Importance of Human Judgment in the Workplace

OpenAI and Microsoft Accused of Copyright Violations in AI Development

OpenAI reviews model behavior after incidents of unauthorized access and security breaches

Geoffrey Hinton warns of AI risks to humanity and calls for regulatory measures