I'm so sick and tired of companies keeping all of this extraneous data on us. I haven't logged into the site nor ordered anything for over a year and I also got this email. Like yes, it's technically not Framework's fault, but why are they even keeping information like IP logins or phone numbers? Why aren't they storing it in the same place they stored purchase information (which apparently has better security)?
There really is no need for these companies to even have a lot of this information. I wish there were actual punitive punishments for having data be stolen/leaked. Maybe then it'll make companies stop and truly think on "whether we really need this data in the first place." Make the fines more expensive than the profit of selling our data. I'm just super salty, because this is probably the 3rd notice I've received of my data being leaked this year alone...