Research: Supabase Customers Expose Personal Data to Web
Thousands of databases hosted by the Supabase platform are exposing sensitive personal data to the public web, according to security research.
Cybersecurity firm UpGuard has discovered a significant number of databases belonging to customers of the Supabase development platform are exposing sensitive personal data to the public web. The research identified approximately 16,000 databases that contained some degree of personal information accessible without adequate protection.
Supabase, which provides a platform for hosting databases for web and application developers, reached a $10 billion valuation earlier this year. The platform's popularity has grown, particularly with applications rapidly built using AI tools. However, the company has faced criticism regarding its security practices.
According to the report, instances where users misconfigure or unintentionally expose their databases are common. In some cases, the volume of exposed data has amounted to millions of records per database.
The findings highlight how rapidly developed applications, potentially with insufficient security, can leak or expose sensitive information. Developers' ignorance or lack of understanding of data security practices can lead to substantial data breaches.