GoKawiilFramework, a company best known for producing modular, highly repairable and customizable PCs and laptops, has suffered a large data breach, which has compromised customer information, according to multiple media outlets and an email from the company that has been shared online. The stolen information includes customer names, email addresses, phone numbers, login IPs and physical addresses. In the emails some customers have received, the company says that order and payment information wasn’t accessed in the breach.
A Framework representative didn’t immediately respond to a request for comment.
According to TechCrunch, Framework spokesperson Eric Schumacher said that all customers were affected, without specifying an exact number.
(great news to wake up to)
There was a major security issue in Metabase, the open-source analytics software.
Framework was using it, and an attacker managed to access a significant amount of information.
Metabase has partially addressed the vulnerability. Exercise extreme… https://t.co/YBl37jnAXc pic.twitter.com/3dgfzAtPf1 — 🐝🇬🇷 (@bee_fumo) August 7, 2026
The breach appears to have been caused by a Metabase Cloud vulnerability using a zero-day exploit, a previously unknown security flaw in the software. In a blog post, Metabase says the vulnerability has already been patched but warns that those self-hosting may still be vulnerable and should upgrade to the latest point release.
These types of breaches aren’t uncommon, even for large companies, and they hit across the industry. CNET reporting has shown that data breaches are becoming increasingly widespread and severe, while companies are often providing less transparency about the scope of the compromised information and the methods attackers use to gain access.
If you’ve been affected by the Framework data breach, there are some measures you can take to minimize the damage. Change any exposed and reused passwords, enable two-factor authentication if you haven’t already, keep a close eye on any payment cards linked to that account, and revoke access to services you no longer need.
... continue reading