Slashdot
Follow
Framework Notifies 'All Customers' of a Data Breach Via Compromised Metabase BI Service
Framework has alerted customers to a data breach impacting personal information. The exploit occurred through a zero-day vulnerability in the Metabase Business Intelligence service. Affected data includes customer names, email addresses, phone numbers, and physical addresses. All Framework customers were impacted, though a specific number was not provided. Framework is also investigating potential impacts on Framework for Business clients. Metabase, the BI service provider, confirmed their own breach due to the same zero-day exploit. Hackers gained access to customer databases stored on Metabase's cloud servers. Framework's customer notification included Metabase's advisory detailing the cloud instance breach. The computer manufacturer confirmed that hackers stole personal data but not payment information. This incident highlights a significant security lapse affecting Framework's customer base.