Some Supabase customers are publicly exposing reams of people’s data to the web

A cybersecurity firm found that thousands of databases hosted by a development platform are publicly exposing sensitive personal information including names, addresses, phone numbers, and passwords. The exposure stems from customers misconfiguring their databases or unknowingly leaving them accessible to the internet, a problem that has become more common as developers increasingly use AI tools to build apps and websites, which can contain security flaws or require specific configurations developers may not understand. Data breaches from improperly configured storage have historically resulted in leaks of military emails, government files, driver's licenses, and other sensitive records. The platform's leadership states that security is a shared responsibility where the company provides secure defaults but customers control their own configuration.