Framework security incident history
Hacking, data breaches and other security incidents involving Framework, with related coverage.
Framework customer data stolen by exploiting Metabase vulnerability
Impact: Customer contact details, addresses and login IPs
An unauthenticated SQL injection zero-day vulnerability in Metabase was exploited to breach Framework's customer analytics environment. Customer contact details, addresses and login IPs were stolen, and Framework notified all customers of the data breach.
Related reports: 2 →Phishing at Framework's external accountancy firm leaks customer data
Impact: Customer names, email addresses and outstanding balances
An employee at Framework's external accountancy firm was deceived by an email impersonating the CEO and sent a spreadsheet containing customer information to the attacker. The leaked information included customer names, email addresses and outstanding balances. Framework notified affected customers of the incident.
Related reports: 2 →