Framework discloses data breach after accountant gets phished

Important info :

- Keating Consulting Group is Framework's accounting service provider

> Keating Consulting accountant was tricked on January 11 by a threat actor impersonating Framework's CEO into sharing a spreadsheet containing customers' personally identifiable information (PII) "associated with outstanding balances for Framework purchases."

> the accountant responded to the attacker and provided a spreadsheet with the following information: Full Name, Email Address, Balance Owed.

> Framework says its Head of Finance notified Keating Consulting's leadership of the attack once he became aware of the breach roughly 29 minutes after the external accountant replied to the attacker's emails at 8:42 AM PST on January 11th

They already notified affected people.

Link to Framework's breach notification email someone shared : https://community.frame.work/t/framework-data-breach/43408