AI website-building tool Lovable shifts the blame after a security incident: data leaks are an industry-wide problem, and website builders are responsible for security
German security firm Crissy Field scanned a large number of Lovable projects
Many sites sent Supabase database records out as soon as they loaded, with no login required
The worst case exposed more than a thousand identity documents
Passport numbers, expiration dates, and nationalities were all sitting there
Forum user profiles, chat logs, and ticket payment information were also affected
Many of these sites were cobbled together by users with no technical background
Handelsblatt asked Lovable about it. The company said this was an industry-wide problem, and its terms make website builders responsible for data security
German security firm Crissy Field scanned a large number of Lovable projects
Many sites sent Supabase database records out as soon as they loaded, with no login required
The worst case exposed more than a thousand identity documents
Passport numbers, expiration dates, and nationalities were all sitting there
Forum user profiles, chat logs, and ticket payment information were also affected
Many of these sites were cobbled together by users with no technical background
Handelsblatt asked Lovable about it. The company said this was an industry-wide problem, and its terms make website builders responsible for data security
