// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / Framework
Breach Record

Framework

DISCLOSED 2026-08-14 · SUPPLY CHAIN

Computer maker Framework disclosed a data breach affecting all customers, attributing it to an upstream cyberattack at Metabase. Metabase confirmed it was hacked via an unknown zero-day vulnerability. The notification was seen by TechCrunch.

The record

What we know

Disclosed
2026-08-14
Attack vector
Supply Chain
Sector
computer manufacturing
ColdRecon assessment

Could a positive-security control have prevented this?

Verdict · unclear · opinion

The breach originated from an upstream provider via an unknown zero-day; insufficient details to determine if a positive-security model would have prevented it.

Our assessments are opinion, grounded in the cited public facts. Read them critically.

Sources

Cited reporting

Similar vector · recent

Other supply chain breaches on file

This page is the permanent ColdRecon entry for the Framework disclosure. It updates if new public reporting emerges. All tracked breaches →

Framework just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →