Over 16,000 misconfigured Supabase databases expose passwords, authentication tokens, and personal data — 28.09.2026

Researchers found more than 16,000 misconfigured Supabase databases exposing readable tables containing personally identifiable information, passwords, or authentication tokens. More than half of the exposed databases contained PII, while a smaller subset included passwords and authentication tokens.