Computer maker Framework notifies ‘all customers’ of a data breach

Framework Computer notified all customers of a data breach affecting names, email addresses, phone numbers, and physical addresses—stemming from an upstream zero-day vulnerability in third-party business intelligence vendor Metabase. This incident highlights a critical supply chain security risk: organizations are exposed to breaches not just through their own infrastructure but through vendors' unpatched vulnerabilities, requiring IT leaders to reassess third-party risk management and incident response protocols. The breach underscores that even niche manufacturers can be targets, and that payment data exclusion provides limited mitigation when personal identifiers enable identity theft and social engineering attacks.