Framework says hackers accessed customer data after phishing attack on accounting partner

Framework confirmed that an attacker social-engineered an employee at its external accounting partner, Keating Consulting, to obtain a spreadsheet containing customer full names, email addresses, and balances owed. The compromise resulted from an email impersonating Framework's CEO; Framework notified affected customers, plans mandatory phishing training for employees with access to customer data, and is auditing accounting providers. Keating has not publicly commented and the full scope of affected customers is unclear.