Framework, known for its repairable and upgradeable computers, has informed its customers about a data breach that exposed various personal details. The company communicated this incident via email on August 6, revealing that names, login IP addresses, addresses, phone numbers, and email addresses were accessed during the breach.
The breach was traced back to Framework’s database provider, Metabase, which confirmed that payment information was not compromised. In its communication, Framework included Metabase’s account of the breach, noting that the attack was identified on August 3. Metabase reported that an “unknown (0-day) vulnerability” was exploited to gain unauthorized access to the data, which has since been patched.
Investigation and Response
Metabase is currently conducting a forensic investigation to fully understand the breach’s nature and scope. Their findings and security recommendations are still considered preliminary. In response to the incident, Framework stated that it rotated its credentials immediately after being informed of the breach and confirmed that there were no unauthorized changes in admin access or any other systems outside of Metabase.
Future Data Security Measures
Framework is also taking steps to enhance its data storage practices with external database vendors. This incident comes at a challenging time for the company, which has faced difficulties related to a global memory shortage. Earlier this year, Framework announced price increases and had to adjust preorder specifications for its new Framework Laptop Pro due to rising component costs.
Conclusion
While Framework has managed to secure payment information, the exposure of customer data raises concerns about data security. The company is actively working to improve its data handling procedures and mitigate future risks.
This article was produced by NeonPulse.today using human and AI-assisted editorial processes, based on publicly available information. Content may be edited for clarity and style.
Original source: engadget.com
