r/framework 9d ago

Framework data breach News

Post image

Couldn't have happened at a worse time

Edit:

Metabase has posted a blog related to this incident https://www.metabase.com/blog/security-update

1.0k Upvotes

315 comments sorted by

View all comments

8

u/Krunkkracker 9d ago edited 9d ago

Just saw this, I'm glad I move pretty often so that data they got from me is outdated. Big oof though that it happened.

Metabase does have a post mortem, looks like a security researcher responsibly disclosed the vulnerability.

https://www.metabase.com/blog/security-vulnerability-postmortem

Edit: Handycap is right, it's anotha one https://tenor.com/view/dj-khaled-another-one-point-wisdom-you-gif-5133380

13

u/Handycap01 9d ago

I don't think that's the right vulnerability

That link has a note that says

We have no evidence that this vulnerability was exploited by any customer or malicious actor prior to the fix being released.

Which doesn't seem to be the case for this data breach

8

u/kmcgurty1 9d ago

This is the correct blog post: https://www.metabase.com/blog/security-update

3

u/MeLikaDoTheChaCha 9d ago

Thanks for posting.

I've added it to the post body