Framework customer information was accessed as part of a data breach - Engadget

The company says payment details weren't exposed. Framework, maker of deliberately repairable and upgradeable computers, has notified all of its customers that their data was exposed in a breach. According to an email the company sent late Thursday, August 6, customer names, login IPs, addresses, phone numbers and emails were accessed during a hack of the company's business database provider Metabase. Payment information was not included in the breach. The company included Metabase's explanation in its own email, which details when the provider identified the attack on August 3 and the actions Metabase took to address it. According to a blog on Metabase's own website, someone used an "unknown (0-day) vulnerability" to access data, which Metabase has now identified and patched. The provider's findings and security recommendations are "preliminary" as of now. "We are working with a third-party forensic investigation firm to understand the full nature and scope of the event," Metabase shared in an email to Framework. Framework, for its part, says it rotated its credentials after it was notified of the breach and "confirmed that there were no changes in admin access or access to system