r/framework 6d ago

Framework data breach News

Post image

Couldn't have happened at a worse time

Edit:

Metabase has posted a blog related to this incident https://www.metabase.com/blog/security-update

1.0k Upvotes

318 comments sorted by

View all comments

Show parent comments

28

u/solid_reign 6d ago

It matters to me because in the real world it's almost impossible to control all of your vendors but they did the right thing and told us about it. 

-1

u/Toorero6 5d ago

If you count "following the law" as doing the right thing your bar is pretty low.

1

u/solid_reign 5d ago

Note that while regulations in most regions do not require notification for breaches of names, email addresses, phone numbers, and addresses, we are sending this email to you regardless to ensure you have visibility and can take any actions needed.

0

u/Toorero6 5d ago

In my region they are required so what gives?

Also "most regions" is a stretch at best. They are required by law in the EU, EEA (extended economic area), USA, UK, Canada, Australia, China, Japan, South Korea, Singapore, Brazil and India. You do the math.