Framework has told all of its customers that a breach exposed personal information after hackers accessed its cloud instance through Metabase, a business-intelligence provider. The incident matters because it affected the entire customer base of a maker of modular, repairable computers, potentially enabling phishing or identity fraud using contact and address details.

The stolen data included customers’ names, email addresses, telephone numbers and physical addresses, but Framework said payment information was not affected. Metabase said attackers exploited an unknown zero-day vulnerability to access customer databases hosted on its cloud servers; Framework did not disclose the number affected, though estimates suggest it has sold hundreds of thousands of devices.