Most exhibit houses plan around load-in, not ransomware. That is the gap.
If you design and build tradeshow environments in the Rome–Atlanta corridor — CAD on the shop network, CNC and metal fab on the floor, AV partners on-site, project managers bouncing between Microsoft 365 and hotel Wi-Fi — your attack surface is not "the office." It is every laptop that left with a crew, every shared drive that holds a client's floorplan, and every temporary network you trusted because the show must open tomorrow.
Event venues and production shops are soft targets for the same reasons dental billing vendors are: lots of third parties, shared devices, and deadlines that make "we'll lock that down later" feel rational. Attackers do not need to understand your scenic flats. They need one credential, one open share, or one infected USB that rides from a vendor laptop onto your project files.
Where the real risk lives
- Show-site networks — Convention Wi-Fi, temporary switches under the booth, and "guest" SSIDs that look official. Rogue access points and unencrypted sessions turn lead-capture tablets and install laptops into listening posts.
- Shared and loaner devices — Crew machines that bounce between shops, hotels, and venues. One sticky local admin password reused across three shows is an incident waiting for a calendar invite.
- Vendor AV and subcontractors — USB sticks, media players, and "just plug into our network for five minutes" habits. Your client's brand assets and your fabrication IP travel with those people.
- CAD and file shares — Design packages, CNC toolpaths, and client revisions sitting on open SMB shares or perpetual guest links. Ransomware loves fabrication floors because downtime costs more than a quiet restore test ever did.
- Microsoft 365 for project teams — External guests, shared Channels, and "anyone with the link" folders for RFP decks and site surveys. Convenience at load-in becomes exposure at exfiltration.
You are not running a bank. You are running a production business where a locked design share or a wiped project laptop on Thursday can cancel Friday's install.
What to tighten before the next install
- Separate shop, office, and show kits — Keep CNC/design systems off the same flat network as guest Wi-Fi and visitor laptops. Show kits should be known devices with MFA, not random personal machines.
- Kill shared passwords on crew gear — Unique accounts (or tightly managed local profiles), MFA on Microsoft 365 and remote tools, and a wipe/reset checklist when loaners come home.
- Treat CAD/file shares like inventory — Named owners, no anonymous guest links for active jobs, revoke access when a freelancer or AV partner rolls off. If you cannot say who can download a package in two minutes, fix that first.
- Assume venue Wi-Fi is hostile — Company hotspot or known VPN for anything that touches email, project files, or client data. Lead capture and demo machines stay offline from admin accounts.
- Backups that survive the shop — Offline or immutable copies of active job folders and Microsoft 365. Test a restore on a real project folder — not a binder that says you have backups.
- Vendor access with an end date — Temporary accounts for AV and install partners; kill tokens and shares the day the show closes.
Takeaway for IT decision-makers
Build your security around the show calendar — because attackers already do.
The shops that stay upright treat every multi-show week like a mini incident-response drill: known devices, least-privilege file access, MFA everywhere it exists, and a restore path that works when the CNC queue cannot wait for "IT will look Monday." Rome and Northwest Georgia production houses do not need a Fortune 500 SOC. They need the same discipline they already apply to freight and load-in — applied to networks, identities, and files.
Brotherly Technology works with SMBs across Rome and Northwest Georgia on Microsoft 365 hardening, backups that restore, vendor access hygiene, and practical ransomware readiness — including the messy reality of shops that live half on the floor and half on the road.
Ready to secure your shop floor and show floor?
Learn more about our managed IT services for exhibit houses and experiential fabrication shops. Exhibit & Fabrication IT →
Insight piece for experiential marketing / exhibit design & fabrication operators; not a report of any specific named incident.