16,000 Supabase Databases Exposed Names, Passwords and Auth Tokens to the Open Web
Sixteen thousand databases, wide open to anyone with a URL. Security researchers at UpGuard found roughly 16,000 Supabase-hosted databases publicly exposing people’s personal data on the open web, according to research reported by TechCrunch on September 25. The exposed records included names, home addresses, phone numbers and user passwords — plus a smaller number of authentication tokens and, in rare cases, credit card data. Cybernews, which reviewed the findings, put the count at 16,326 databases and noted that over half appeared to leak personally identifiable information. ...