conv.

All stories
SecurityRunning 2d ↳ Framework notifies all customers of data breach via Metabase hack

Framework Discloses Customer Data Breach Tied to Metabase Zero-Day

Laptop maker Framework says attackers exploited a zero-day flaw in Metabase to access its customer database, exposing contact details but not payment data.

5 items146 engagement55 comments PressHacker NewsGoogle News

Conversation activity · last 3 days peak 1/hr

Peak 1 item in one hour at Aug 7, 1 AM; 5 items over 3 days Aug 7, 1 AM — 1 itemAug 7, 2 AM — no itemsAug 7, 3 AM — no itemsAug 7, 4 AM — no itemsAug 7, 5 AM — no itemsAug 7, 6 AM — no itemsAug 7, 7 AM — no itemsAug 7, 8 AM — no itemsAug 7, 9 AM — no itemsAug 7, 10 AM — no itemsAug 7, 11 AM — no itemsAug 7, 12 PM — 2 itemsAug 7, 1 PM — no itemsAug 7, 2 PM — 1 itemAug 7, 3 PM — no itemsAug 7, 4 PM — no itemsAug 7, 5 PM — no itemsAug 7, 6 PM — no itemsAug 7, 7 PM — no itemsAug 7, 8 PM — no itemsAug 7, 9 PM — no itemsAug 7, 10 PM — no itemsAug 7, 11 PM — no itemsAug 8, 12 AM — no itemsAug 8, 1 AM — no itemsAug 8, 2 AM — no itemsAug 8, 3 AM — no itemsAug 8, 4 AM — no itemsAug 8, 5 AM — no itemsAug 8, 6 AM — no itemsAug 8, 7 AM — no itemsAug 8, 8 AM — no itemsAug 8, 9 AM — no itemsAug 8, 10 AM — no itemsAug 8, 11 AM — no itemsAug 8, 12 PM — no itemsAug 8, 1 PM — no itemsAug 8, 2 PM — no itemsAug 8, 3 PM — no itemsAug 8, 4 PM — no itemsAug 8, 5 PM — no itemsAug 8, 6 PM — no itemsAug 8, 7 PM — no itemsAug 8, 8 PM — no itemsAug 8, 9 PM — no itemsAug 8, 10 PM — no itemsAug 8, 11 PM — no itemsAug 9, 12 AM — no itemsAug 9, 1 AM — no itemsAug 9, 2 AM — no itemsAug 9, 3 AM — no itemsAug 9, 4 AM — no itemsAug 9, 5 AM — no itemsAug 9, 6 AM — no itemsAug 9, 7 AM — no itemsAug 9, 8 AM — no itemsAug 9, 9 AM — no itemsAug 9, 10 AM — no itemsAug 9, 11 AM — no itemsAug 9, 12 PM — no itemsAug 9, 1 PM — no itemsAug 9, 2 PM — 1 itemAug 9, 3 PM — no itemsAug 9, 4 PM — no itemsAug 9, 5 PM — no itemsAug 9, 6 PM — no itemsAug 9, 7 PM — no itemsAug 9, 8 PM — no itemsAug 9, 9 PM — no itemsAug 9, 10 PM — no itemsAug 9, 11 PM — no itemsAug 10, 12 AM — no itemsAug 10, 1 AM — no itemsAug 10, 2 AM — no itemsAug 10, 3 AM — no itemsAug 10, 4 AM — no itemsAug 10, 5 AM — no itemsAug 10, 6 AM — no itemsAug 10, 7 AM — no itemsAug 10, 8 AM — no itemsAug 10, 9 AM — no items 1 item · 1 AM
Aug 8Aug 9Aug 10

Summary, timeline and people extracted by Claude from 5 items across 3 sources · 19h ago. Quotes are verbatim.

Framework disclosed on its community forum that a zero-day vulnerability in the Metabase analytics tool was used to access its customer database, exposing contact information for customers. The company said no payment data was compromised. Multiple outlets picked up the disclosure over the following days, with tech press summarizing the scope and advising affected users on next steps.

  • Framework disclosed that a zero-day vulnerability in Metabase, an analytics tool, was exploited to access its customer database.
  • Customer contact details were exposed, but Framework and reporting outlets state no payment information was compromised.
  • The disclosure was first surfaced on Framework's community forum and quickly picked up by Hacker News and multiple tech publications.
  • Coverage continued for several days after the initial disclosure, with outlets summarizing the incident and advising affected customers.

How it unfolded

  1. Report Follow-up coverage continues

    finance.biggo.com published a further report on the Metabase zero-day attack and Framework's disclosure, two days after the initial news broke.

  2. Report Engadget confirms no payment data leaked

    Engadget reported that Framework's customer database was accessed but that no payment information was released.

  3. Report Tech outlets summarize breach

    How-To Geek and Tech My Money published explainer articles on the Metabase-linked breach and what customers should know.

  4. Reaction Hacker News discussion begins

    The disclosure was submitted to Hacker News by user RobinHirst11, drawing 146 points and 55 comments.

  5. Event Framework posts breach disclosure

    Framework published a disclosure on its community forum stating its customer database was accessed via a Metabase zero-day exploit.

What people are saying verbatim

“Framework discloses data breach via Metabase 0-day”

community.frame.work, Official Framework community forum post · Hacker News (linking to community.frame.work) · Aug 6

“Framework customer information was accessed as part of a data breach”

Engadget, Tech news outlet · Engadget · Aug 6