Data Breach Exposes Hundreds of Thousands of Framework Customers

Framework, a company that makes modular repairable computers, has notified all of its customers that hackers stole their names, email addresses, phone numbers, and physical addresses, due to an incident at a company that provides business intelligence.

On Thursday, several Framework customers said on social media that they had received an email from the company notifying them of the data breach.

Framework’s spokesperson Eric Schumacher told TechCrunch that the breach affected “all customers,” but declined to specify a specific number. Framework computers are relatively niche products, but some estimates say the company sold hundreds of thousands of devices.

According to the notification seen by TechCrunch, the company blamed the data breach on an upstream cyberattack at Metabase.

Metabase disclosed its own breach in a blog post on its official website, where it said that it was hacked by someone using an unknown security flaw, a so-called zero-day. The company said the hackers exploited the bug to give them the ability to access customers’ databases stored on Metabase’s cloud servers.

In its email to customers, Framework also included the email Metabase sent to the company, which says hackers accessed Framework’s cloud instance. The computer maker said it investigated the incident and found that hackers had stolen its customers' personal data, but did not include their payment information.

Metabase did not respond to a request for comment.

Impact of the Data Breach

The data breach has exposed the personal information of hundreds of thousands of Framework customers. This incident highlights the importance of robust security measures and data protection protocols in the tech industry.

• The breach was caused by an upstream cyberattack at Metabase, a company that provides business intelligence.
• Framework's customers have been notified of the data breach, but the company has not specified the number of affected customers.
• The breach has exposed personal information, including names, email addresses, phone numbers, and physical addresses, but payment information was not compromised.

Conclusion

The data breach at Framework is a wake-up call for the tech industry. Companies must prioritize robust security measures and data protection protocols to prevent such incidents in the future.