Computer maker Framework notifies ‘all customers’ of a data breach

Framework, a manufacturer of modular, repairable computers, has informed all of its customers that their personal information has been compromised due to a data breach at a company providing business intelligence services. The breach was disclosed on Thursday, with multiple Framework customers reporting receipt of an email from the company notifying them of the incident.

Framework spokesperson Eric Schumacher confirmed to TechCrunch that the breach impacted "all customers," though he did not provide a precise figure. The company has not disclosed the exact number of devices sold, though industry estimates suggest hundreds of thousands.

Framework attributes the data breach to an upstream cyberattack at Metabase, a company they use for business intelligence. Metabase disclosed its own data breach on its official website, attributing the hack to an attacker exploiting an unknown security flaw, or zero-day vulnerability. The intruders used this flaw to gain access to Framework's cloud servers, where they were able to extract customers' databases.

In their email to affected customers, Framework included the exact message from Metabase, which detailed the hackers' access to Framework's cloud instance. The computer manufacturer reported that the stolen data includes customers' names, email addresses, phone numbers, and physical addresses, but not payment information. However, Metabase has not responded to requests for further comment on the incident.