Upgradable Laptop Maker Framework Suffers Breach Affecting All Customers

<p>A hacker breached upgradable laptop maker Framework Computer and accessed a customer database. The San Francisco PC maker began <a href="https://www.reddit.com/r/framework/comments/1vhic7k/framework_data_breach/" target="_blank" title="(Opens in a new tab)">notifying</a> customers on Thursday, saying the breach exposed "customer names, email addresses, phone numbers, and [shipping] addresses," but not order or payment information. </p><p>The breach occurred through a third-party company called Metabase, which <a href="https://www.metabase.com/product/business-intelligence?use_case=bi" target="_blank" title="(Opens in a new tab)">uses</a> AI to deliver "business intelligence" to its <a href="https://www.metabase.com/case-studies" target="_blank" title="(Opens in a new tab)">100,000+</a> clients, which seem to include McDonalds, T-Mobile and Hugging Face. </p><p>The hacker used a previously unknown "<a href="https://www.pcmag.com/how-to/what-are-zero-day-exploits-and-attacks" target="_self">zero-day</a>" vulnerability in the Metabase Cloud system affecting versions 1.58 and above. "We also discovered that the attacker was able to gain access to your instance," Metabase told Framework on Thursday morning. </p><div class="mb-0 rounded-md bg-gray-100 p-3 md:p-5" id="related-video">

<div class="flex items-center">

<div class="w-6 flex-none">

<img class="w-full" src="/images/pcmag-simplified.png" alt="PCMag logo">