Framework Says All Customers Affected by Data Breach Tied to Metabase Zero-Day
Framework says all customers were affected after a Metabase zero-day exposed customer contact and address data through an upstream analytics-platform compromise.
Why it matters: The breach demonstrates how an upstream analytics compromise can propagate into downstream customer-data exposure across connected enterprise systems.
Framework says all of its customers were affected by a breach tied to a cyberattack against Metabase. Framework said names, email addresses, phone numbers and physical addresses were exposed, while payment data was not included. Metabase disclosed a previously unknown vulnerability affecting recent versions that could allow arbitrary SQL against the application database and potentially expose administrator access or connected data. The incident illustrates how SaaS and analytics platforms can become supply-chain security risks for downstream customers.