Framework, a company that makes modular repairable computers, said it has notified all of its customers that hackers stole their names, email addresses, phone numbers, and physical addresses, due to an incident at a company that provides business intelligence.
On Thursday, several Framework customers said on social media that they had received an email from the company notifying them of the data breach.
Framework’s spokesperson Eric Schumacher told TechCrunch that the breach affected “all customers,” but declined to specify a specific number. Framework computers are relatively niche products, but some estimates say the company sold hundreds of thousands of devices.
According to the notification seen by TechCrunch, the company blamed the data breach on an upstream cyberattack at Metabase.
Metabase disclosed its own breach in a blog post on its official website, where it said that it was hacked by someone using an unknown security flaw, a so-called zero-day. The company said the hackers exploited the bug to give them the ability to access customers’ databases stored on Metabase’s cloud servers.
This article was aggregated automatically by CyberWire Daily's newsfeed engine. Original reporting: techcrunch.com.
