16,000 Supabase Databases Exposed Through Misconfiguration as AI-Generated Code Amplifies Security Risks

Researchers have uncovered widespread data exposure affecting thousands of cloud-hosted applications, revealing a critical vulnerability pattern that stems from the combination of weak security configurations in AI-generated applications and developer oversight. Cybersecurity firm UpGuard discovered approximately 16,000 exposed databases hosted on Supabase—a popular development platform that reached a $10 billion valuation in 2026—containing sensitive personal data including names, addresses, phone numbers, passwords, and authentication tokens. The exposed databases affected Y Combinator startups and other well-known applications, with breached data ranging from private conversations to thousands of license plate records, immigration service details, and government consulate information.