Framework, the Computer Manufacturer, Alerts Entire Customer Base About Data Breach
Framework, a manufacturer of modular and repairable computers, has informed its customers that a data breach has led to the theft of their names, email addresses, phone numbers, and physical addresses, resulting from a security incident involving one of its business intelligence service providers.
On Thursday, numerous Framework customers took to social media to share that they received an email from the company alerting them to the security breach.
Eric Schumacher, a spokesperson for Framework, stated that the incident impacted “all customers,” but did not provide a specific figure. Although Framework’s products occupy a specialized market, estimates suggest that the company has sold several hundred thousand units.
In the notification reviewed, Framework attributed the data breach to an upstream cyber incident involving Metabase.
Metabase announced its own security breach via a blog entry on its site, revealing that hackers exploited an unknown vulnerability, categorized as a zero-day flaw. This breach allowed unauthorized access to customer databases stored on Metabase’s cloud infrastructure.
In its communication to customers, Framework included the message from Metabase, which confirmed that hackers were able to access Framework’s cloud instance. The company conducted an investigation and confirmed that customer personal data had been compromised, although payment information remained secure.
Metabase has yet to respond to inquiries for further information.
