Supabase Databases Leak Sensitive Data Due to Misconfigurations

UpGuard’s recent scan revealed that roughly sixteen thousand Supabase‑hosted databases were leaving personal information openly accessible on the internet.

What the exposed data includes

The leaked records span names, addresses, phone numbers and, in a smaller set, passwords and authentication tokens. Examples range from private chats on an adult‑streaming platform to license‑plate logs from a U.S. valet service and contact details from an immigration consultancy.

Why it matters for GPU / AI infrastructure

As AI‑assisted “vibe‑coding” accelerates app development, developers often overlook security hardening steps. Misconfigured storage layers become easy entry points for attackers, jeopardising not only user privacy but also the trust in AI‑generated workloads that rely on backend data stores.

Supabase’s response

The platform’s CISO emphasized that security is a shared responsibility, noting that default settings are designed to be secure and that customers must configure their projects correctly. Supabase says it continues to improve tooling and notifies users when issues are detected.