Framework, a maker of modular, repairable computers, notified all customers that personal data — including names, email addresses, phone numbers and physical addresses — was accessed in a cyber incident at its business‑intelligence provider, Metabase.

The breach was disclosed after customers reported receiving notification emails on Thursday; the company said the incident stemmed from a zero‑day vulnerability in Metabase’s system, which allowed attackers to obtain customer data from Metabase’s cloud servers.

Framework’s spokesperson Eric Schumacher said the breach affected “all customers,” though no specific number was given. The company confirmed that payment information was not compromised.

“…We investigated the incident and found that hackers had stolen personal data, but did not obtain payment details,” Schumacher said.

Metabase disclosed its own breach on its website, stating that an unknown security flaw — a zero‑day — was exploited to gain access to its customers’ databases.

Framework received a copy of the notification from Metabase and included it in its customer email.

The incident highlights the reliance of hardware manufacturers on third‑party cloud services and the potential impact on user privacy when such services are compromised.