Technology
Research finds thousands of databases hosted on Supabase exposed customer data
TechCrunch reports that security research identified exposed user information across roughly 16,000 databases hosted on the platform.
The short version
- Cybersecurity firm UpGuard found around 16,000 databases on development platform Supabase exposing personal information to the public web.[TechCrunch]
- Exposed items included names, addresses, phone numbers, passwords, and authentication tokens, according to the research.[TechCrunch]
- Supabase stated that its platform is secure by default and that security remains a shared responsibility with its customers.[TechCrunch]
Key facts
- Cybersecurity firm UpGuard identified approximately 16,000 Supabase-hosted databases exposing sensitive personal data publicly.[TechCrunch]
- Exposed data found by researchers included user names, addresses, phone numbers, passwords, and authentication tokens.[TechCrunch]
- Supabase CISO Bil Harmer stated projects are secure by default and noted security is a shared responsibility with clients.[TechCrunch]
What remains uncertain
- Supabase had not reviewed UpGuard's research at the time of comment, leaving the specific cause of exposure across the 16,000 databases unconfirmed by the platform.[TechCrunch]
Sources
Outlet counts describe coverage, not independent confirmation. Reports may share a wire service or original source.