An UpGuard investigation identified about 16,000 databases hosted in Supabase with some degree of personal information accessible from the public website. The finding includes contact details, passwords and tokens, and re-focuss on the risks of poor configurations in applications created with AI tools.