// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / Supabase customers
Breach Record

Supabase customers

DISCLOSED 2026-09-27 · MISCONFIG

Thousands of databases hosted on Supabase are publicly exposing data due to misconfiguration. The issue is not a hack but a configuration error by customers. No specific data types or number of records are mentioned.

The record

What we know

Disclosed
2026-09-27
Attack vector
Misconfig
Sector
technology
Sources

Cited reporting

↗ databreaches.net
Similar vector · recent

Other misconfig breaches on file

Surfshark · 2026-09-11 Natural Resources Wales · 2026-09-10 Natural Resources Wales · 2026-09-09 Natural Resources Wales · 2026-09-08 Manchester Airports Group · 2026-09-04 Manchester Airports Group · 2026-09-03 Manchester Airports Group · 2026-09-02 Manchester Airports Group · 2026-09-01

This page is the permanent ColdRecon entry for the Supabase customers disclosure. It updates if new public reporting emerges. All tracked breaches →

Supabase customers just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →