Security1 hSeptember 26, 2026, 00:29

UpGuard: 16,000 Supabase databases publicly expose user data

Security firm UpGuard found around 16,000 Supabase-hosted databases exposing personal data to the public web, including names, addresses, phone numbers and some passwords. Examples include an Indian adult streaming site, a U.S. valet service and an African consulate in France.

TechCrunch

Open source

UpGuard: 16,000 Supabase databases publicly expose user data

UpGuard found about 16,000 exposed Supabase databases
Leaked data includes names, addresses, phones and some passwords
One database belonged to an African consulate in France
Supabase says projects are 'secure by default'

#Supabase#UpGuard

Scan finds working service_role key in git for 58 of 154 public Supabase apps

Security

DHS HART Biometric Database Holds 260 Million People Without Public Rules

Security

Tag confusion in AWS Load Balancer Controller can expose databases to the internet

Security

UpGuard: 16,000 Supabase databases publicly expose user data

Scan finds working service_role key in git for 58 of 154 public Supabase apps

DHS HART Biometric Database Holds 260 Million People Without Public Rules

Tag confusion in AWS Load Balancer Controller can expose databases to the internet

14,913 Kubernetes Dashboards Found Exposed on the Public Internet