Supabase faces security concerns as thousands of databases leak sensitive data

Cybersecurity firm UpGuard has uncovered that thousands of databases hosted on Supabase, a development platform, are exposing sensitive personal data to the public web. The research identified around 16,000 databases containing personal information such as names, addresses, and phone numbers. Supabase, which reached a $10 billion valuation earlier this year, has faced criticism over its security practices. UpGuard’s findings highlight how misconfigured databases, often created using AI tools, can lead to data breaches. The exposed data includes private conversations, license plates, and contact information from various services, including an African consulate and a virtual SIM farm. Supabase’s Chief Information Security Officer, Bil Harmer, stated that the company provides secure defaults and emphasizes shared responsibility with its users. UpGuard’s research underscores the global nature of the issue, with data breaches linked to Supabase across multiple regions. The firm’s findings add to a growing trend of data leaks associated with AI-driven development platforms.