Computer maker Framework notifies ‘all customers’ of a data breach
Computer maker Framework notifies ‘all customers’ of a data breach
电脑制造商 Framework 通知“所有客户”发生数据泄露
Framework, a company that makes modular repairable computers, said it has notified all of its customers that hackers stole their names, email addresses, phone numbers, and physical addresses, due to an incident at a company that provides business intelligence.
生产模块化可维修电脑的公司 Framework 表示，由于一家提供商业智能服务的公司发生安全事件，他们已通知所有客户，黑客窃取了他们的姓名、电子邮件地址、电话号码和家庭住址。
On Thursday, several Framework customers said on social media that they had received an email from the company notifying them of the data breach. Framework’s spokesperson Eric Schumacher told TechCrunch that the breach affected “all customers,” but declined to specify a specific number. Framework computers are relatively niche products, but some estimates say the company sold hundreds of thousands of devices.
周四，多名 Framework 客户在社交媒体上表示，他们收到了公司发来的数据泄露通知邮件。Framework 发言人 Eric Schumacher 向 TechCrunch 证实，此次泄露影响了“所有客户”，但拒绝透露具体受影响人数。Framework 电脑属于相对小众的产品，但据估计该公司已售出数十万台设备。
According to the notification seen by TechCrunch, the company blamed the data breach on an upstream cyberattack at Metabase. Metabase disclosed its own breach in a blog post on its official website, where it said that it was hacked by someone using an unknown security flaw, a so-called zero-day. The company said the hackers exploited the bug to give them the ability to access customers’ databases stored on Metabase’s cloud servers.
根据 TechCrunch 看到的通知，该公司将此次数据泄露归咎于上游服务商 Metabase 遭受的网络攻击。Metabase 在其官网博客中披露了此次泄露事件，称黑客利用了一个未知的安全漏洞（即“零日漏洞”）对其进行了攻击。该公司表示，黑客利用该漏洞获得了访问存储在 Metabase 云服务器上的客户数据库的权限。
In its email to customers, Framework also included the email Metabase sent to the company, which says hackers accessed Framework’s cloud instance. The computer maker said it investigated the incident and found that hackers had stolen its customers’ personal data, but did not include their payment information. Metabase did not respond to a request for comment.
在发给客户的邮件中，Framework 还附上了 Metabase 发给他们的邮件，其中提到黑客访问了 Framework 的云实例。这家电脑制造商表示，经调查发现，黑客窃取了客户的个人数据，但并未涉及支付信息。Metabase 未回应置评请求。