Supabase Data Exposure | 16,000+ Open Databases and What Security Teams Can Do

We found more than 16,000 Supabase databases sitting wide open, and over half held personal data like names, phone numbers and passwords. The organizations behind them ranged from a valet service to a government consulate, and in many cases the owners never checked the settings AI wrote.

What is the Supabase data exposure?
Anyone visiting these sites could read the data in their databases. Many belong to vibe-coded apps, where AI coding tools often handle the database setup.

Why should security teams care?
If your vendors are building apps this way, your company's data could be exposed too.

What can security teams do?
This video covers three steps, from questions to ask your vendors to checks for your own Supabase projects.

Read the full research at upguard.com/blog

#Shorts #Supabase #DataExposure #VibeCoding #Cybersecurity #ThirdPartyRisk

===============
ABOUT UPGUARD:
===============
UpGuard is a cybersecurity platform that helps global organizations prevent data breaches, monitor third-party vendors, and improve their security posture. Using proprietary security ratings, world-class data leak detection capabilities, and powerful remediation workflows, we proactively identify security exposures for companies of all sizes.

Discover more at upguard.com