An office-furniture manufacturer with plants in California and Ohio showed up on a ransomware leak site late last week. Ransomware.live indexed Maverick Desk (maverickdesk.com / myworkstream.com) as a claimed victim of The Gentlemen ransomware group at 2026-10-09 19:24 UTC (about 3:24 p.m. ET Friday), with an estimated attack date of Oct. 6. ShellCodeX and other aggregators mirror the same listing and flag it as an unverified claim.
Maverick Desk's site describes a U.S. office-furniture maker founded in 1992: laminate casegoods, desks, credenzas, conference tables, height-adjustable workstations, and school furniture, with West and East contacts (800.414.1655 Maverick West; 833.620.5778 Maverick East). Tracker text places production in Gardena, California, and Fairfield, Ohio. The public site was up (HTTP 200) when we checked Monday morning.
What's claimed, and what's confirmed
Claimed: The Gentlemen have listed Maverick Desk on their leak site. That is the whole public record so far. The tracker description is a company profile (products, QuickShip positioning, GSA-approved language), not a file dump, data-size claim, or publication deadline.
Tracker context, not incident facts: Ransomware.live's exposure panel for the listing shows a thin ParanoidLab credential signal (one password, zero rated critical) and Microsoft 365 MX records on myworkstream.com. Those are domain-hygiene notes. They do not prove how anyone got in, or that anyone did.
Not confirmed: As of Monday morning we found no statement from Maverick Desk, no news report, and no state or federal filing. There is no confirmed encryption, no confirmed theft of dealer, customer, or employee data, no reported order or shipping disruption, and no word on any payment. Leak sites are extortion tools. Treat this as a claim until the company says otherwise.
Why it matters to furniture makers and industrial SMBs
Furniture and casegoods shops run lean ERP, dealer portals, CAD and cut lists, QuickShip scheduling, and a thin IT bench. The same pattern shows up in Rome, Dalton, Chattanooga, and across the Southeast: one Microsoft 365 tenant, one VPN for the ERP consultant, shared shop-floor PCs, and payment changes that arrive by email from "the dealer" or "accounting."
A leak-site headline rarely waits for forensics. Fraudsters copy the company name into invoice-redirect and payroll-change emails the same week. Dealers and facilities buyers get the phishing first. Whether or not files were ever encrypted, the mailbox is the soft target.
Clear takeaway
Treat The Gentlemen claim against Maverick Desk as a continuity drill for manufacturers and dealer networks. Lock down email and ERP with MFA, keep an unchangeable backup of orders and cut lists, and verify every bank or remittance change by phone before you move money.
Actions to take this week
- Require MFA on Microsoft 365 / Google Workspace, ERP, dealer portals, and VPN. Retire shared shop-floor logins.
- Check leaked-credential exposure for your domains and force resets on anything that shows up, starting with admins and finance.
- Confirm backups you can restore of ERP, order history, CAD/cut lists, and dealer pricing — with one copy ransomware cannot alter or delete. Test a restore this month.
- Segment shop-floor PCs from office systems where you can, and inventory every vendor with remote access.
- Brief AP, sales, and key dealers: new bank or remittance details get a call-back to a known number, never a reply to the email.
- Write a one-page incident card: who leads, who calls your insurer and IT provider, and how you'll reach dealers if email is down.
Brotherly Technology helps manufacturers, distributors, and industrial SMBs across Rome, Northwest Georgia, and the Southeast turn ransomware headlines into a short readiness review — MFA, backups, vendor access, and payment-change controls. If you want a second set of eyes before the next claim lands, give us a call.
Sources:
- Ransomware.live: Maverick Desk / The Gentlemen. Discovered 2026-10-09 19:24 UTC; est. attack date 2026-10-06; domains maverickdesk.com / myworkstream.com; claim-level only.
- ShellCodeX: Maverick Desk, The Gentlemen claim. Listed Oct. 9, 2026; flagged as an unverified claim.
- Maverick Desk (maverickdesk.com). Company context: U.S. office furniture / casegoods; West and East contacts on site. No incident acknowledgment cited here.