Phishing at Framework's external accounting firm leaks customer data
An employee at Framework's external accounting firm was deceived by an email impersonating the CEO and sent a spreadsheet containing customer information to the attacker. The leaked information included customer names, email addresses and outstanding balances. Framework notified affected customers of the incident.
Key facts
- Affected organization
- Framework
- Incident type
- Phishing & smishing
- Occurred / detected
- Not confirmed
- Scale of damage
- Customer names, email addresses and outstanding balances
- Cause / method
- An external accounting firm employee, deceived by an email impersonating the CEO, sent a spreadsheet of customer information
- Location
- United States
If your data was exposed
Exposed dataNameEmail
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- Framework disclosed the customer data leak resulting from phishing of an external accounting firm employee and notified affected customers.
2 related reports
Other incidents at Framework
Framework customer data stolen by exploiting Metabase vulnerability
Impact: Customer contact details, addresses and login IPs
An unauthenticated SQL injection zero-day vulnerability in Metabase was exploited to breach Framework's customer analytics environment. Customer contact details, addresses and login IPs were stolen, and Framework notified all customers of the data breach.
Related reports: 2 →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.