
Metabase is a business data visualization tool used by tens of thousands of companies. Hackers exploited a zero-day vulnerability to steal customer data.
Key Points:
• This vulnerability received a score of 10/10 — the most severe level
• Hackers gained admin access without using any password at all
• Framework confirmed that customer names, emails, phone numbers, and addresses were stolen
• Metabase has already released a patch — self-hosted server users must update immediately
Your data was not leaked from your phone — it was leaked from the servers of companies where you have previously shopped. Therefore, do not use the same password across all websites and make sure to enable 2FA.
Kun Long
Author at The Sharing KH