conv.

All stories
SecurityRunning 1d ↳ Framework notifies all customers of data breach via Metabase hack

Framework notifies all customers of data breach via Metabase hack

Modular computer maker Framework says hackers accessed customer names, emails, phone numbers, and addresses through a zero-day exploit at upstream vendor Metabase.

5 items59 engagement0 comments PressHacker NewsMastodonGoogle NewsBluesky

Conversation activity · last 3 days peak 2/hr

Peak 2 items in one hour at Aug 7, 11 AM; 5 items over 3 days Aug 7, 11 AM — 2 itemsAug 7, 12 PM — 1 itemAug 7, 1 PM — no itemsAug 7, 2 PM — no itemsAug 7, 3 PM — no itemsAug 7, 4 PM — no itemsAug 7, 5 PM — no itemsAug 7, 6 PM — no itemsAug 7, 7 PM — no itemsAug 7, 8 PM — no itemsAug 7, 9 PM — no itemsAug 7, 10 PM — no itemsAug 7, 11 PM — no itemsAug 8, 12 AM — no itemsAug 8, 1 AM — no itemsAug 8, 2 AM — 1 itemAug 8, 3 AM — no itemsAug 8, 4 AM — no itemsAug 8, 5 AM — no itemsAug 8, 6 AM — no itemsAug 8, 7 AM — no itemsAug 8, 8 AM — no itemsAug 8, 9 AM — no itemsAug 8, 10 AM — no itemsAug 8, 11 AM — no itemsAug 8, 12 PM — no itemsAug 8, 1 PM — no itemsAug 8, 2 PM — no itemsAug 8, 3 PM — no itemsAug 8, 4 PM — no itemsAug 8, 5 PM — no itemsAug 8, 6 PM — no itemsAug 8, 7 PM — no itemsAug 8, 8 PM — no itemsAug 8, 9 PM — no itemsAug 8, 10 PM — no itemsAug 8, 11 PM — no itemsAug 9, 12 AM — no itemsAug 9, 1 AM — no itemsAug 9, 2 AM — no itemsAug 9, 3 AM — no itemsAug 9, 4 AM — no itemsAug 9, 5 AM — no itemsAug 9, 6 AM — no itemsAug 9, 7 AM — no itemsAug 9, 8 AM — no itemsAug 9, 9 AM — no itemsAug 9, 10 AM — 1 itemAug 9, 11 AM — no itemsAug 9, 12 PM — no itemsAug 9, 1 PM — no itemsAug 9, 2 PM — no itemsAug 9, 3 PM — no itemsAug 9, 4 PM — no itemsAug 9, 5 PM — no itemsAug 9, 6 PM — no itemsAug 9, 7 PM — no itemsAug 9, 8 PM — no itemsAug 9, 9 PM — no itemsAug 9, 10 PM — no itemsAug 9, 11 PM — no itemsAug 10, 12 AM — no itemsAug 10, 1 AM — no itemsAug 10, 2 AM — no itemsAug 10, 3 AM — no itemsAug 10, 4 AM — no itemsAug 10, 5 AM — no itemsAug 10, 6 AM — no itemsAug 10, 7 AM — no itemsAug 10, 8 AM — no itemsAug 10, 9 AM — no items 2 items · 11 AM
Aug 8Aug 9Aug 10

Summary, timeline and people extracted by Claude from 5 items across 5 sources · 21h ago. Quotes are verbatim.

Framework, a computer maker known for modular repairable devices, notified all of its customers on August 7 that a data breach exposed their personal information including names, email addresses, phone numbers, and physical addresses. The breach was caused by a zero-day vulnerability at Metabase, a business intelligence platform that Framework used; hackers exploited this flaw to access Framework's customer database stored on Metabase's cloud servers. Payment information was not compromised.

  • Framework disclosed a data breach affecting all customers through an upstream Metabase vulnerability exploited via a zero-day flaw.
  • Stolen data includes names, emails, phone numbers, and physical addresses; payment information was not compromised.
  • Metabase confirmed its own breach in a separate blog post, acknowledging hackers exploited an unknown zero-day to access customer databases.
  • Framework sent notification emails to customers on August 7, with estimates suggesting hundreds of thousands of devices were sold.

How it unfolded

  1. Reaction Story reaches Hacker News

    The TechCrunch article is shared on Hacker News, continuing discussion of the incident.

  2. Reaction Story spreads on social media

    News of the breach circulates on Bluesky and other social platforms, with multiple Framework customers confirming receipt of breach notification emails.

  3. Report TechCrunch reports Framework breach

    TechCrunch publishes article confirming Framework's notification of all customers and identifies Metabase as the source of the upstream attack.

  4. Event Framework detects breach, notifies customers

    Framework discovers that hackers accessed customer data through a Metabase vulnerability and sends notification emails to all affected customers.

  5. Event Metabase discloses own breach

    Metabase posts blog announcement of its own breach caused by an unknown zero-day security flaw that allowed hackers to access customer databases on its cloud servers.

What people are saying verbatim

“all customers”

Eric Schumacher, Framework spokesperson · TechCrunch · Aug 6

“hackers stole their names, email addresses, phone numbers, and physical addresses”

TechCrunch, News outlet · TechCrunch · Aug 6

“the company blamed the data breach on an upstream cyberattack at Metabase”

TechCrunch, News outlet · TechCrunch · Aug 6

“hackers had stolen its customers' personal data, but did not include their payment information”

Framework, Computer maker · TechCrunch · Aug 6