UpGuard (Organization): news timeline & CVEs

Some Supabase customers are publicly exposing reams of people’s data to the web

UpGuard found about 16,000 Supabase databases publicly exposing customers’ sensitive personal data.

UpGuard told TechCrunch it found roughly 16,000 Supabase-hosted databases with some degree of public exposure. Those databases are making people’s sensitive information available on the public web, according to research reported by Zack Whittaker. The story describes customer misconfiguration and data leakage, not a named Supabase vulnerability or confirmed intrusion.

DataBreaches.netSep 26, 10:49 UTC · 21h agoData breach 2 sources

Some Supabase customers are publicly exposing reams of people’s data to the web

UpGuard found about 16,000 Supabase databases publicly exposing personal data, including passwords and contact details.

Cybersecurity firm UpGuard told TechCrunch it found about 16,000 Supabase-hosted databases exposing some personal data to the public web. Exposed fields included names, addresses, phone numbers, and a smaller number of passwords and authentication tokens. Examples included an African government consulate in France, a U.S. valet service’s license plates, an immigration service’s contacts, and a virtual SIM farm used to intercept one-time passcodes. Supabase CISO Bil Harmer said projects are secure by default and that customers control their own configuration.

TechCrunch · Securityupdated Sep 26, 10:49 UTC · 21h agofirst Sep 25, 17:29 UTC · 1d agoData breach 2 sources

UpGuard

Timeline2 articles

Appears with

Some Supabase customers are publicly exposing reams of people’s data to the web

Some Supabase customers are publicly exposing reams of people’s data to the web