Framework’s Data Breach Revealed Customer Data: Here’s What to Know

Framework, a company best known for producing modular, highly repairable and customizable PCs and laptops, has suffered a large data breach, which has compromised customer information, according to multiple media outlets and an email from the company that has been shared online. The stolen information includes customer names, email addresses, phone numbers, login IPs and physical addresses. In the emails some customers have received, the company says that order and payment information wasn’t accessed in the breach.

A Framework representative didn’t immediately respond to a request for comment.

According to TechCrunch, Framework spokesperson Eric Schumacher said that all customers were affected, without specifying an exact number.

The breach appears to have been caused by a Metabase Cloud vulnerability using a zero-day exploit, a previously unknown security flaw in the software. In a blog post, Metabase says the vulnerability has already been patched but warns that those self-hosting may still be vulnerable and should upgrade to the latest point release.

These types of breaches aren’t uncommon, even for large companies, and they hit across the industry. CNET reporting has shown that data breaches are becoming increasingly widespread and severe, while companies are often providing less transparency about the scope of the compromised information and the methods attackers use to gain access.

If you’ve been affected by the Framework data breach, there are some measures you can take to minimize the damage. Change any exposed and reused passwords, enable two-factor authentication if you haven’t already, keep a close eye on any payment cards linked to that account, and revoke access to services you no longer need.

Framework has been hit hard by the ongoing memory shortage and has raised prices twice this year. The cost increase for the memory modules was so significant that it actually pared down the RAM loadout on the Framework Laptop 13 Pro, despite the product already being offered for preorder. The latest breach may further challenge consumer confidence at a time when the company is already navigating pricing pressures and supply chain challenges.

Ajay has worked in tech journalism for over a decade as a reporter, analyst, product reviewer, and editor. He got his start in consumer tech, breaking Android news at Newsweek before going to PCMag, where he reviewed hundreds of smartphones, battery packs, and chargers as a Mobile Analyst. He also worked at Lifewire, a Dotdash Meredith brand, as a Tech Commerce Editor, putting together tested best-of lists and assigning product reviews across categories including smart home, uninterruptible power supplies, generators, and automotive tech.

Most recently, he was Section Editor, Mobile at Digital Trends, spearheading his team’s coverage of breaking news, features, reviews, roundups, deals, and more across a variety of mobile products, including phones, wearables, VR headsets, batteries, and chargers. If you want Ajay’s advice about anything tech, especially solar panels, UPS, batteries, EVs, and charging technology, you can reach him at ajkumar@cnet.com.

See full bio