Upgradable laptop maker Framework suffers breach affecting all customers. The hacker accessed data on Framework customer names, email addresses, phone numbers, and physical addresses via an attack on third-party provider Metabase. Principal Reporter OUR EXPERT When he's not battling bugs and robots in Helldivers 2, Michael is reporting on AI, satellites, cybersecurity, PCs, and tech policy. Edited By: August 7, 2026 (Credit: PCMag/Michael Kan) A hacker breached upgradable laptop maker Framework Computer and accessed a customer database. The San Francisco PC maker began notifying customers on Thursday, saying the breach exposed "customer names, email addresses, phone numbers, and [shipping] addresses," but not order or payment information. The breach occurred through a third-party company called Metabase, which uses AI to deliver "business intelligence" to its 100,000+ clients, which include McDonald's and Capital One. The hacker used a previously unknown "zero-day" vulnerability in the Metabase Cloud system affecting versions 1.58 and above. "We also discovered that the attacker was able to gain access to your instance," Metabase told Framework on Thursday morning. You May Also Like Keep Watching Sweeping Router Ban, Changing Your Gmail Name, Pixel 11 Leaks | Tech Today Framework has been reviewing the logs provided by Metabase, and they show that the hacker accessed data on customer login IP addresses and full billing and shipping addresses. For business customers, Framework is still determining whether the company name, phone number, and billing email were exposed. (Credit: Framework/PCMag) In the meantime, the PC maker said that "No other personally identifiable information, order information, or payment information was accessed." It's unclear whether the attacker downloaded all the exposed data. Still, a Framework spokesperson tells PCMag the breach affects all customers. Metabase's own investigation remains ongoing, so it's possible that more data and corporate clients were affected. In response, Framework says it "rotated credentials on all databases associated with our Metabase instance and confirmed that there were no changes in admin access or access to systems outside of Metabase." Metabase says it's already patched the zero-day vulnerability. In January 2024, Framework also reported a breach involving a third-party accounting firm, Keating Consulting, that exposed customer names and email addresses. About its expert. Michael Kan Principal Reporter Experience I've been a journalist for over 15 years. I got my start as a schools and cities reporter in Kansas City and joined PCMag in 2017, where I cover satellite internet services, cybersecurity, PC hardware, and more. I'm currently based in San Francisco, but previously spent over five years in China, covering the country's technology sector. Since 2020, I've covered the launch and explosive growth of SpaceX's Starlink satellite internet service, writing 600+ stories on availability and feature launches, but also the regulatory battles over the expansion of satellite constellations, fights with rival providers like AST SpaceMobile and Amazon, and the effort to expand into satellite-based mobile service. I've combed through FCC filings for the latest news and driven to remote corners of California to test Starlink's cellular service. I also cover cyber threats, from ransomware gangs to the emergence of AI-based malware. In 2024 and 2025, the FTC forced Avast to pay consumers $16.5 million for secretly harvesting and selling their personal information to third-party clients, as revealed in my joint investigation with Motherboard. I also cover the PC graphics card market. Pandemic-era shortages led me to camp out in front of a Best Buy to get an RTX 3000. I'm now following how the AI-driven memory shortage is impacting the entire consumer electronics market. I'm always eager to learn more, so please jump in the comments with feedback and send me tips. Areas of Expertise Latest By Michael Kan

Framework: Framework laptops Hit by Data Breach Exposing All Customers. Framework Laptop Maker Discloses Major Data Breach Affecting All Customers Framework, the San Francisco-based modular laptop company known for its right-to-repair philosophy, has confirmed a data breach exposing the personal information of its entire customer base. The incident, disclosed this week via notifications to affected users, compromised names, email addresses, phone numbers, and physical shipping addresses effectively a full directory of every individual who has purchased one of the company's devices. The breach strikes a particularly damaging blow to Framework, which has built its brand on transparency and user trust. While the company states that no payment or financial data was accessed since credit card details were not stored in the compromised system the exposed information remains highly valuable to cybercriminals. Such data is commonly exploited for phishing attacks, SIM swapping, and identity theft. Details about the breach remain limited. Framework has not specified when the unauthorized access occurred or how long attackers had access to customer data, leaving security experts questioning the company's handling of the incident. The lack of clarity stands in contrast to Framework's reputation for openness, further complicating its response. The timing of the breach adds to the fallout, as the company has positioned itself as a disruptor in the tech industry, challenging traditional manufacturers with its repairable, user-friendly designs. The incident underscores the risks even transparency-focused companies face in safeguarding customer data. "id": "fra1786127124", "linkid": "frameworkcomputer", "type": "Breach", "date": "8/2026", "severity": "85", "impact": "4", "explanation": "Attack with significant impact with customers data leaks" {'affected_entities': [{'customers_affected': 'Entire customer base (all ' 'purchasers of Framework ' 'devices)', 'industry': 'Technology (Laptop Manufacturing)', 'location': 'San Francisco, USA', 'name': 'Framework', 'type': 'Company'}], 'customer_advisories': 'Notifications sent to affected users', 'data_breach': {'personally_identifiable_information': 'Names, email ' 'addresses, phone ' 'numbers, physical ' 'shipping addresses', 'sensitivity_of_data': 'High (names, email addresses, phone ' 'numbers, physical shipping addresses)', 'type_of_data_compromised': 'Personal Information'}, 'description': 'Framework, the San Francisco-based modular laptop company ' 'known for its right-to-repair philosophy, has confirmed a ' 'data breach exposing the personal information of its entire ' 'customer base. The incident compromised names, email ' 'addresses, phone numbers, and physical shipping addresses of ' 'every individual who has purchased one of the company's ' 'devices.', 'impact': {'brand_reputation_impact': 'Damaging blow to brand built on ' 'transparency and user trust', 'data_compromised': 'Names, email addresses, phone numbers, ' 'physical shipping addresses', 'identity_theft_risk': 'High risk due to exposed personal ' 'information', 'payment_information_risk': 'None (payment data not stored in ' 'compromised system)'}, 'references': [{'source': 'Incident disclosure via notifications to affected ' 'users'}], 'response': {'communication_strategy': 'Notifications to affected users'}, 'title': 'Framework Laptop Maker Discloses Major Data Breach Affecting All ' 'Customers', 'type': 'Data Breach'} Published by Sawyer Savings Bank Hit by Data Security Incident in August 2026 Sawyer Savings Bank, a community bank based in Saugerties,... Aug 7, 2026 New npm Supply-Chain Worm "ChainDrop" Automates Package Infections at Scale A recently discovered npm supply-chain worm, dubbed ChainDrop,... Aug 7, 2026 Xplor Resamania Faces Alleged Data Breach Exposing 5.2 Million Records A threat actor has claimed responsibility for a potential... Aug 7, 2026

Framework has launched the Laptop 13 Pro, its most significant design refresh yet for the modular laptop series. The new model addresses previous battery life issues with a 74 WHr battery, up from 61 WHr in earlier versions. Key changes include a graphite aluminium finish, haptic trackpad, touchscreen display with 700 nit brightness, and LPCAMM2 memory modules. The redesign breaks compatibility with some older components, including the bottom case and keyboard. The laptop uses Intel's Core Ultra Series 3 processors and offers Ubuntu 24.04 LTS as a pre-installed option. Existing Laptop 13 owners can retrofit some new parts, though the battery, trackpad, and bottom case must be upgraded together. However, pricing has increased substantially. No model costs less than $1,500, with the review configuration approaching $3,000. LPCAMM2 memory module costs have doubled, further pushing prices upward.