Some Supabase customers are publicly exposing reams of people's data to the web

Some Supabase customers are publicly exposing reams of people's data to the web Thousands of databases hosted by development platform Supabase are exposing people’s sensitive information to the public web, new security research by cybersecurity firm UpGuard has found. UpGuard told TechCrunch that it found around 16,000 databases on which some degree of personal data was exposed while they were hosted by Supabase, which allows web and app developers to store and run their databases.

This SecurityIncident is relevant to the technology intelligence record because it involves Meta, Anthropic, ChatGPT. The source article should remain the factual reference for follow-up coverage.

• Thousands of databases hosted by development platform Supabase are exposing people’s sensitive information to the public web, new security research by cybersecurity firm UpGuard has found.
• UpGuard told TechCrunch that it found around 16,000 databases on which some degree of personal data was exposed while they were hosted by Supabase, which allows web and app developers to store and run their databases.
• Supabase earlier this year reached a $10 billion valuation , thanks to a rise in developers hosting their vibe-coded apps on the platform.
• But the company has faced criticism for how it handles user security.
• There are widely documented cases of users misconfiguring or unknowingly exposing their databases to the broader internet, in some instances to the tune of millions of records each .
• The findings highlight how vibe-coded apps and websites can spill or expose sensitive data through basic misconfigurations and improper security.