PC maker Framework reveals data breach after accountants get hacked

A lifestyle image of the Framework laptop surrounded by replaceable components
(Image credit: Framework)

Accountants Keating Consulting fell prey to a phishing attack earlier this week, which resulted in a leak of sensitive data belonging to one of its clients - Framework Computer.

The news was confirmed by the PC maker via a breach notification letter sent to affected customers. 

Spotted by BleepingComputer, the letter states that a threat actor impersonated the CEO of Framework Computer and tricked a Keating Consulting accountant into sharing classified information.

Mandatory training

"On January 9th, at 4:27am PST, the attacker sent an email to the accountant impersonating our CEO asking for Accounts Receivable information pertaining to outstanding balances for Framework purchases," it says in the notification letter. "On January 11th at 8:13am PST, the accountant responded to the attacker and provided a spreadsheet with the following information: Full Name, Email Address, Balance Owed.” We don’t know exactly how many people were affected.

"Note that this list was primarily of a subset of open pre-orders, but some completed past orders with pending accounting syncs were also included in this list."

All of the customers whose data was exposed in this attack were identified, and notified. They were warned of potential phishing attacks and social engineering scams, and were urged to be extra careful when receiving emails pretending to be either from Keating or Framework Computer. The company stressed that it will only send emails from the “support@frame.work” address, and that it will never ask for payment information this way. 

Going forward, all Keating Consulting employees who can access Framework’s sensitive data will have to go through phishing and social engineering attack training, the company concluded. 

"We are also auditing their standard operating procedures around information requests," Framework said. "We are additionally auditing the trainings and standard operating procedures of all other accounting and finance consultants who currently or previously have had access to customer information."

More from TechRadar Pro

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
Representational image depecting cybersecurity protection
Top venture capital firm Insight Partners confirms it was hit by cyberattack
Avast cybersecurity
Zapier tells customers their data may have been accessed
Image depicting hands typing on a keyboard, with phishing hooks holding files, passwords and credit cards.
Microsoft warns about a new phishing campaign impersonating Booking.com
A computer being guarded by cybersecurity.
Wacom warns users their data may have been stolen in breach
Closing the cybersecurity skills gap
HPE starts contacting victims of 2023 Russian cyberattack
HPE
HPE investigating claims that hacker breached developer environments, source code
Latest in Security
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Broadcom warns of worrying security flaws affecting VMware tools
URL phishing
HaveIBeenPwned owner suffers phishing attack that stole his Mailchimp mailing list
Ransomware
Cl0p resurgence drives ransomware attacks to new highs in 2025
Google Chrome
Google Chrome security flaw could have let hackers spy on all your online habits
cybersecurity
Chinese government hackers allegedly spent years undetected in foreign phone networks
Data leak
A major Keenetic router data leak could put a million households at risk
Latest in News
Xbox Series X and Xbox wireless controller set to a green background
Xbox Insiders are currently testing a new Game Hub feature that looks useful, but I've got mixed feelings about it
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Broadcom warns of worrying security flaws affecting VMware tools
Microsoft Surface Laptop and Surface Pro devices on a table.
Hate Windows 11’s search? Microsoft is fixing it with AI, and that almost makes me want to buy a Copilot+ PC
Oura Ring 4
Activity tracking on Oura Ring is about to get a whole lot better, but I've got bad news about your step count
Google Pixel Buds Pro 2
Cleaned your Pixel Buds Pro 2 recently? If not, you might be getting worse sound
Google Maps on a phone being held in someone's hand
Google Maps is getting two key upgrades, for easier route planning and quicker access to Gemini AI