Framework data breach hits all customers after Metabase zero-day attack
Framework, the startup known for building modular, repairable laptops, has told customers that hackers stole personal information belonging to its entire user base. The Framework data breach did not start inside the companyโs own systems, though. It traces back to Metabase, a business intelligence provider that Framework relies on, which was hit by attackers exploiting a previously unknown security flaw.
Key takeaways
- Framework notified all customers that hackers accessed their names, email addresses, phone numbers, and physical addresses.
- The breach originated upstream at Metabase, a business intelligence provider used by Framework.
- Metabase says it was hacked through an unknown zero-day vulnerability that let attackers reach customer databases stored on its cloud servers.
- Framework says payment information was not compromised, though it declined to say how many customers were affected.
- Metabase did not respond to requests for comment from TechCrunch.
Framework Notifies All Customers of Data Breach
Framework confirmed that every customer in its database was touched by the incident, though the company has not put a number on how many people that actually represents. Eric Schumacher, a spokesperson for Framework, according to statements made to TechCrunch, the security incident impacted the entirety of the customer base, though a precise figure was not disclosed when pressed.
โฆ Continue reading the full article at the original source below.
