Some Supabase customers are publicly exposing reams of people’s data to the web

Security firm UpGuard found about 16,000 Supabase-hosted databases exposing sensitive personal data publicly due to misconfigurations. Exposed info includes addresses, phone numbers, passwords, and data from various sectors like immigration, valet services, and government consulates. The rise of AI-generated vibe-coded apps using Supabase is linked to increased data breaches from such exposures.