Framework Data Breach Hits All Customers via Metabase Zero Day
Framework says every customer was affected after a Metabase zero day exposed names, emails, phone numbers and addresses, but no payment information was exposed.
Summary
Framework, maker of modular, repairable computers, said every customer was affected by a data breach disclosed August 7, 2026. Hackers stole names, email addresses, phone numbers and physical addresses, but not payment information. Customers reported receiving notification emails on Thursday. Spokesperson Eric Schumacher declined to provide an affected total, although some estimates place Framework device sales in the hundreds of thousands.
Framework blamed an upstream attack on business intelligence provider Metabase. Metabase said attackers exploited an unknown security flaw, or zero day, to access customer databases on its cloud servers. Framework included Metabase’s alert in its customer email, confirming attackers accessed Framework’s cloud instance. Framework investigated and identified the compromised data, while Metabase did not answer TechCrunch’s request for comment.
Positives
- Framework notified all customers after confirming the breach affected its entire customer base.
- Payment information was not included in the customer data stolen from Framework’s cloud instance.
- Framework investigated the incident and identified the specific categories of personal information compromised.
- Metabase publicly disclosed that attackers exploited an unknown security flaw in its cloud service.
Risks & concerns
- All Framework customers had names, email addresses, phone numbers and physical addresses stolen.
- An unknown Metabase zero day gave hackers access to customer databases hosted on its cloud servers.
- Eric Schumacher declined to disclose the number affected, despite estimates that Framework sold hundreds of thousands of devices.
- Metabase did not respond to TechCrunch’s request for comment about the upstream cyberattack.