Researchers find personal data exposed in around 16,000 Supabase databases

Security firm UpGuard found around 16,000 databases hosted by Supabase with some personal data exposed to the public web, TechCrunch reports. The accessible information included names, addresses and phone numbers; a smaller number of datasets exposed passwords or authentication tokens. The affected projects included a valet service, an immigration service and a consulate. Supabase lets developers store and run databases for their apps. Its security chief said projects are secure by default and customers control their configurations. The findings concern databases operated by Supabase customers, so the exposure does not establish that Supabase's own systems were breached.