Framework notifies all customers of data breach
Modular computer maker Framework announces personal data of all customers was stolen in cyberattack.
1Framework customer data stolen
Framework, known for modular repairable computers, notified all customers of a data breach. Hackers stole names, email addresses, phone numbers, and physical addresses. The breach originated from a cyberattack on business intelligence provider Metabase.
2Customers notified via email
On Thursday, Framework customers shared on social media that they received breach notifications. Spokesperson Eric Schumacher confirmed 'all customers' were affected but declined to specify numbers. The niche products have reportedly sold hundreds of thousands of units.
3Zero-day exploit at Metabase
Framework attributed the breach to a cyberattack on Metabase, which disclosed being hacked via an unknown security flaw (zero-day). Attackers exploited this to access customer databases stored on Metabase's cloud servers, compromising sensitive information.
4Framework's cloud instance accessed
Framework included Metabase's email in customer communications, confirming hackers accessed their cloud instance. Investigation revealed stolen personal data but no compromised payment information. The company acted transparently in notifying affected users promptly.
5Metabase declines comment
Metabase didn't respond to TechCrunch's request for comment. Their blog post acknowledged attackers accessed customer databases. Meanwhile, Framework demonstrated accountability by quickly informing customers about the security incident.
6Impact on modular computer market
Framework has built reputation around sustainable, repairable computers, selling hundreds of thousands of niche devices. This breach could shake customer trust and affect the company's standing in the emerging modular PC market segment.
7Cloud security wake-up call
The incident highlights security risks of third-party cloud services. Business intelligence tools like Metabase store sensitive customer data, where a single vulnerability can impact all clients. Companies must rigorously vet supplier security standards.
8Recommended user precautions
Framework customers should be aware their personal data (emails, addresses) was stolen. They must watch for phishing attempts, avoid suspicious links, and enable two-factor authentication where possible to secure accounts against potential identity theft.
Original article: cybersecurity | TechCrunch — Framework müşteri verileri çalındığını duyurdu