Framework Data Breach: What Customer Data Was Exposed to Hackers

Framework, known for its modular and repairable laptops, has reported a major customer data breach. The incident affected personal user information, including names, email addresses, phone numbers, login IP addresses, and physical addresses. Company representatives stated that payment data and order history were not compromised.

The cause of the breach was a vulnerability in the cloud version of Metabase analytics software, which hackers exploited using a previously unknown zero-day exploit. Metabase developers have already released a patch to address the vulnerability, but users who self-host the software are advised to update to the latest version.

According to TechCrunch, the incident impacted all Framework customers, though the exact number of affected users has not been specified. Experts estimate the breach may have exposed data of hundreds of thousands of users. The company has not yet provided an official comment on the matter.

To minimize risks, experts advise customers to change passwords, especially if reused on other platforms, enable two-factor authentication, and monitor bank accounts for suspicious transactions. It is also recommended to revoke access to unused services.

This incident is another blow to Framework’s reputation, which is already facing challenges due to rising component prices and supply chain disruptions. The data breach may further erode customer trust amid existing pricing and logistics issues.