Skip to content 
Title: Data Breach Alert: Framework Customers’ Information Compromised, But Payment Details Remain Safe
In a recent communication, Framework, the innovative company known for its repairable and customizable laptops, informed their customers of a significant data breach. On August 6, the company alerted users via email that sensitive data, including names, login IP addresses, mailing addresses, contact numbers, and email addresses, had been breached. Fortunately, payment information was reportedly not part of the exposed data.
The breach stemmed from an incident involving Metabase, Framework’s business database provider. In their explanation, Metabase detailed that on August 3, they became aware of a cyber attack that exploited what they referred to as an “unknown (zero-day) vulnerability.” This vulnerability has since been identified and addressed, although the provider stated that their findings and security measures are still considered preliminary. They are currently collaborating with a third-party forensic team to assess the extent of the situation.
Framework responded promptly by rotating their credentials once the breach was revealed. They reassured customers that there were no changes in admin access or alterations to systems outside the Metabase environment. Additionally, the company is working on enhancing their approach to data storage with external database vendors.
This breach comes at a particularly challenging time for Framework. Despite the recent launch of a promising lineup of products, the company has been grappling with ongoing supply chain issues, particularly a shortage of memory components. Earlier this year, they announced price increases due to market volatility, only to subsequently raise prices again. Compounding these challenges, some customers who preordered the new Framework Laptop Pro received less RAM than originally promised, leading to full refunds for those dissatisfied with the adjustments.
As Framework navigates these turbulent waters, they remain committed to ensuring their customers’ data security and improving their data management practices for the future.
