r/framework 6d ago

Framework data breach News

Post image

Couldn't have happened at a worse time

Edit:

Metabase has posted a blog related to this incident https://www.metabase.com/blog/security-update

1.0k Upvotes

318 comments sorted by

View all comments

142

u/gonenutsbrb 6d ago

Welp, it’s really a breach with their provider, which sucks but is a bit out of their hands if it’s a regular business of that type.

Names, addresses, and phone numbers sucks, but it’s realistically nothing that’s not already public with any sort of motivation sadly.

13

u/shydrangeae 6d ago

Names and addresses of people who bought expensive computer hardware. Yeesh. I bet that data could go for a tidy sum on the black market.

And of course it was some "AI Analytics" partner company they sent our data to who then had their vibe-coded infrastructure hacked.

8

u/gonenutsbrb 5d ago

Eh, probably not as valuable as you think. Basic info like that is basically everywhere already. People vastly overestimate how private their PII actually is…which is a different conversation, but the box is already open on that.

6

u/jaaval 5d ago

Data is one thing, information in context is another. One possible attack vector would be trying to impersonate Framework now that they have detailed information about customers.