16,000 Supabase Databases Found Open Without Authentication

About 16,000 Supabase databases were left open without authentication, exposing names, addresses, phone numbers and passwords, UpGuard researchers reported Sept. 25, 2026. Supabase, a backend platform handling app storage, was valued at $10 billion earlier in 2026 and powers many vibe-coded apps built with AI help. Most exposures appear U.S.-based, though UpGuard called it worldwide.