16,000 Supabase Databases Expose Personal Data, Millions of Records at Risk

Research by UpGuard has identified 16,000 databases hosted on Supabase that are publicly exposing personal data, potentially affecting millions of records. Supabase, which reached a valuation of $10 billion earlier this year, emphasizes that it provides secure defaults and tooling, allowing customers to control their project configurations, according to Bil Harmer, Chief Information Security Officer. However, security researcher Greg Pollock noted that this situation highlights significant awareness issues regarding data exposures. The findings come ahead of an event in San Francisco scheduled from October 13 to 15, where security and tech connections will be discussed. Harmer stated, "Security at Supabase is never finished. We care deeply about getting it right, and we’ll keep making it easier for every developer to ship securely." This incident underscores the ongoing challenges in securing user data on cloud platforms.