HeadlinesBriefing favicon HeadlinesBriefing.com

Framework Data Breach Exposes Customer Info

Engadget •
×

Framework, maker of repairable and upgradeable computers, has notified all customers that their data was exposed in a breach. According to an email sent late Thursday, August 6, customer names, login IPs, addresses, phone numbers, and emails were accessed during a hack of the company's business database provider Metabase. Payment information was not included.

Metabase's explanation details that the attack was identified on August 3 and that someone used an "unknown (0-day) vulnerability" to access data, which has since been patched. The provider's findings are "preliminary," and they are working with a third-party forensic investigation firm.

Framework says it rotated credentials after being notified and confirmed no changes in admin access or access outside Metabase. The company is also reviewing its data storage methodology.

A data breach couldn't have come at a worse time for Framework. Despite announcing new products earlier this year, the company has struggled with the ongoing memory shortage, raising prices in January and March, and recently forcing some preorders to include less RAM than advertised.