Supabase misconfig exposes 16,000+ databases with PII, credentials

Researchers identified over 16,000 Supabase databases with misconfigured access controls, exposing readable tables containing PII, passwords, and auth tokens. The scale suggests systemic configuration pitfalls rather than isolated errors. This elevates risk of credential stuffing and targeted phishing, and underscores cloud database misconfiguration as a persistent attack vector.