Over 16,000 Supabase databases expose sensitive user data

Security researchers found over 16,000 Supabase databases with misconfigurations exposing user data including personally identifiable information, passwords, and authentication tokens. Some of the leaked records also include credit card data. The exposures span businesses globally and affect services ranging from a U.S. valet service to an African government consulate. Researchers attribute the leaks to poor security configurations, often linked to AI-assisted app development.

• Researchers found exposed PII, passwords, and tokens
• Databases were left readable due to poor security settings
• AI-assisted development is common among affected projects
• Data exposed worldwide, from businesses to government entities
• Researchers notified app owners in severe cases