Thousands of Supabase Databases Exposing Personal Data to Public Web
· Technology · TechCrunch
Cybersecurity firm UpGuard discovered around 16,000 databases hosted on the development platform Supabase that were exposing sensitive personal information to the public internet. The exposed data includes names, addresses, phone numbers, user passwords, and authentication tokens across various projects. Affected instances include private conversations on an Indian adult streaming site, license plates from a U.S. valet service, and contact details from an immigration and relocation service. Additional exposed datasets belonged to an African government consulate in France and a virtual SIM farm used for launching scams. While the majority of the exposed databases are located in the United States, researchers confirmed this is a worldwide issue stemming from basic misconfigurations in vibe-coded applications.
Why it matters
The widespread data exposure compromises sensitive personal information of thousands of individuals worldwide, highlighting severe security risks tied to basic misconfigurations in AI-generated and vibe-coded applications.
Read the original report — TechCrunch
Join us on Telegram
Breaking news the moment it lands. At 10,000 members we ship the Android app.