Don't be like these 900+ websites and expose millions of passwords via Firebase

Security researchers discovered that misconfigured Google Firebase databases on over 900 websites exposed roughly 125 million user records — including names, emails, phone numbers, plaintext passwords, and billing details. The researchers scanned 5.2 million domains, produced a list of affected sites, and notified owners; about 24% fixed the misconfiguration while many remained exposed. The report highlights ongoing risks from security misconfiguration and compares the issue to historical cloud misconfiguration problems.