OVER 16,000 SUPABASE DATABASES EXPOSE PII, PASSWORDS, AUTH TOKENS

Summary from the TLDR IT newsletter

UpGuard identified more than 16,000 Supabase databases exposing readable tables. Analysis of their schemas indicated that more than half could expose personal information, with smaller subsets potentially exposing passwords or authentication tokens. The issue is misconfigured access controls rather than a newly discovered platform vulnerability, reinforcing the need for database authorization, exposure testing, and clear ownership of internally built tools.