Framework notifies customers of data breach following upstream cyberattack

Framework, a company known for its modular and repairable computers, has informed all of its customers about a data breach that exposed their personal information. The incident occurred due to a cyberattack on a third-party business intelligence provider, according to a recent report by TechCrunch.

The breach affected customer names, email addresses, phone numbers, and physical addresses. Framework confirmed the incident after several customers reported receiving notification emails. The company attributed the breach to an upstream attack on Metabase, a business intelligence platform. Metabase disclosed its own breach, stating that hackers exploited a zero-day vulnerability to access customer databases hosted on its cloud servers.

Framework's investigation confirmed that hackers accessed its cloud instance and stole customer data, but confirmed that no payment information was compromised. While Framework sells niche products, estimates suggest hundreds of thousands of devices have been sold, indicating a significant number of affected customers.

Source: TechCrunch