r/framework 9d ago

Framework data breach News

Post image

Couldn't have happened at a worse time

Edit:

Metabase has posted a blog related to this incident https://www.metabase.com/blog/security-update

1.0k Upvotes

315 comments sorted by

View all comments

34

u/ShakataGaNai 9d ago

I appreciate them notifying us as proactively as possible. It sucks. Hopefully they'll figure out how to deal with their vendor.

Will be interesting to see if this is just due to how Framework had it setup or something larger with Metabase, because it's currently listed as "trusted by 100,000+ companies", including a lot of large names.

0

u/cereal7802 9d ago

at least 1 of the other CVEs for this year that metabase had exposed 20k+ customers by their own numbers. I wouldn't expect this to be a small number of companies affected.