Framework Customer Database Breached, But Payment Info Not Exposed

Framework, maker of deliberately repairable and upgradeable computers, has notified all of its customers that their data was exposed in a breach. According to an email the company sent late Thursday, August 6, customer names, login IPs, addresses, phone numbers and emails were accessed during a hack of the company's business database provider Metabase. Payment information was not included in the breach.

The company included Metabase's explanation in its own email, which details when the provider identified the attack on August 3 and the actions Metabase took to address it. According to a blog on Metabase's own website, someone used an "unknown (0-day) vulnerability" to access data, which Metabase has now identified and patched. The provider's findings and security recommendations are "preliminary" as of now. We are working with a third-party forensic investigation firm to understand the full nature and scope of the event, Metabase shared in an email to Framework.