Home/Events/Supabase Exposes Sensitive Data of Thousands of Users

Supabase Exposes Sensitive Data of Thousands of Users

Confirmed

Confidence

90%

Impact: 80%

Updated 1d ago

Consensus Brief

Research by UpGuard revealed that approximately 16,000 databases hosted by Supabase are exposing sensitive personal information to the public web. The findings indicate that misconfigurations by users are leading to significant data breaches, including personal data such as names, addresses, and passwords.

Sourced from

TechCrunchT2

Primary: TechCrunch

What Changed Since Last Update

1d ago

This research highlights a new wave of data breaches linked to Supabase, particularly due to the rise in AI-generated applications.

Claim Ledger

4 claims tracked across sources

Confirmed Fact

Around 16,000 databases on which some degree of personal data was exposed.

Confirmed Fact

Exposed datasets included names, addresses, phone numbers, and user passwords.

Confirmed Fact

Majority of exposed datasets appear to be located in the United States.

Official Claim

Supabase's Chief Information Security Officer stated that security is a shared responsibility.

Role-Based Impact Analysis

Source Timeline

1 source corroborating

Some Supabase customers are publicly exposing reams of people’s data to the web

TechCrunch·1d ago