# Researchers find personal data exposed in around 16,000 Supabase databases

_Published Friday, September 25, 2026 at 3:08 PM EDT · Security, Infrastructure · Latest · Tier 1 — Major_

![Researchers find personal data exposed in around 16,000 Supabase databases — Primary](https://techcrunch.com/wp-content/uploads/2026/09/supabase-2279843922.jpg?resize=1200,800)

Security firm UpGuard found around 16,000 databases hosted by Supabase with some personal data exposed to the public web, TechCrunch reports. The accessible information included names, addresses and phone numbers; a smaller number of datasets exposed passwords or authentication tokens. The affected projects included a valet service, an immigration service and a consulate.

Supabase lets developers store and run databases for their apps. Its security chief said projects are secure by default and customers control their configurations. The findings concern databases operated by Supabase customers, so the exposure does not establish that Supabase's own systems were breached.

## Sources

- [TechCrunch](https://techcrunch.com/2026/09/25/some-supabase-customers-are-publicly-exposing-reams-of-peoples-data-to-the-web/)

---
Canonical: https://techandbusiness.org/newswire/JoCDkQmkYZjvapb-f0yyhE
Published: 2026-09-25T19:08:00.810Z
Story chronology: 2026-09-25T17:29:46.000Z
Retrieved: 2026-09-25T20:51:19.159Z
Publisher: Tech & Business (techandbusiness.org)