Framework Alerts Customers of Data Breach Affecting Personal Information
Framework, a company known for its modular and repairable computers, has notified all of its customers about a significant data breach. This incident has resulted in the theft of personal information, including names, email addresses, phone numbers, and physical addresses. The breach was attributed to a cyberattack on Metabase, a third-party provider of business intelligence services.
On Thursday, numerous Framework customers reported receiving emails from the company regarding the breach. Eric Schumacher, a spokesperson for Framework, confirmed that the breach affected all customers but did not disclose the exact number of individuals impacted. Although Framework's products are relatively niche, estimates suggest that the company has sold hundreds of thousands of devices.
According to the notification shared with TechCrunch, the data breach stemmed from an upstream cyberattack at Metabase. Metabase acknowledged its own breach in a blog post, revealing that hackers exploited an unknown security flaw, referred to as a zero-day vulnerability, to gain access to customer databases stored on its cloud servers.
In the email sent to customers, Framework included the notification from Metabase, which indicated that hackers had accessed Framework's cloud instance. Following an investigation, Framework confirmed that the hackers had stolen personal data but noted that payment information was not compromised. Metabase has not yet responded to requests for comment regarding the incident.
