The computer company has notified all customers of a data breach.
Framework, a company best known for producing modular, highly repairable and customizable PCs and laptops, has suffered a large data breach, which has compromised customer information, according to multiple media outlets and an email from the company that has been shared online. The stolen information includes customer names, email addresses, phone numbers, login IPs and physical addresses. In the emails some customers have received, the company says that order and payment information wasn’t accessed in the breach.
A Framework representative didn’t immediately respond to a request for comment.
According to TechCrunch, Framework spokesperson Eric Schumacher said that all customers were affected, without specifying an exact number.
(great news to wake up to)There was a major security issue in Metabase, the open-source analytics software. Framework was using it, and an attacker managed to access a significant amount of information. Metabase has partially addressed the vulnerability. Exercise extreme… https://t.co/YBl37jnAXc pic.twitter.com/3dgfzAtPf1
The breach appears to have been caused by a Metabase Cloud vulnerability using a zero-day exploit, a previously unknown security flaw in the software. In a blog post, Metabase says the vulnerability has already been patched but warns that those self-hosting may still be vulnerable and should upgrade to the latest point release.
These types of breaches aren’t uncommon, even for large companies, and they hit across the industry. CNET reporting has shown that data breaches are becoming increasingly widespread and severe, while companies are often providing less transparency about the scope of the compromised information and the methods attackers use to gain access.
If you’ve been affected by the Framework data breach, there are some measures you can take to minimize the damage. Change any exposed and reused passwords, enable two-factor authentication if you haven’t already, keep a close eye on any payment cards linked to that account, and revoke access to services you no longer need.
Framework has been hit hard by the ongoing memory shortage and has raised prices twice this year. The cost increase for the memory modules was so significant that it actually pared down the RAM loadout on the Framework Laptop 13 Pro, despite the product already being offered for preorder. The latest breach may further challenge consumer confidence at a time when the company is already navigating pricing pressures and supply chain challenges.