Framework notifies all customers of data breach exposing personal details

The modular computer maker confirmed the incident on Thursday, when customers began reporting on social media that they had received breach notification emails. Framework said the attack originated upstream at Metabase, a business intelligence provider whose cloud services it used.

According to Framework, the stolen records included customers' names, email addresses, phone numbers, and physical addresses. The company said payment information was not compromised in the incident.

Framework spokesperson Eric Schumacher said the breach affected "all customers," though he declined to provide a specific number. The company's devices are a niche product, but industry estimates suggest that hundreds of thousands of units have been sold.

Metabase disclosed its own breach on its website, saying hackers exploited an unknown security flaw, or zero-day, that allowed them to access customer databases stored on Metabase's cloud servers. Framework included Metabase's notification in its own email to customers, noting that the hackers accessed its cloud instance.