ISO 27001 Certificate
SOC 1 Type I Certificate
SOC 2 Type II Certificate
PCI DSS
HIPAA
RGPD
Internal validation & live display
Multiple badges & continuous verification
Faster underwriting decisions
ISOSOC2 Type 1SOC2 Type 2PCI DSSHIPAAGDPR

You can tell a lot about a company by the company it keeps. Here at Enwork, we work with clients that are leaders in productivity, innovation, intuitive design and creative thinking - clients like Tesla, AirBnB, Lyft, Yeti and Netflix. These organizations want workspaces that not only meet their needs for agility and productivity but also reflect their innovative values and culture. It's why they come to Enwork. At Enwork, we stay ahead of trends to anticipate how to best optimize spaces, and design with creative forethought into how things can adapt for the future. Our products are created using a variety of material choices that beautifully prove their long-term value. We understand that what our clients invest in today must work for tomorrow. We service our clients with the same focus on speed and agility. Our product development is rapid, our processes are adaptive and our teams are always on high alert. It's why we can count many fast-moving firms among our valued clients, and it's why we continue to grow at a record-breaking pace.

Enwork A.I CyberSecurity Scoring

Enwork

Company Details

Linkedin ID:

enwork

Employees number:

101

Number of followers:

4,221

NAICS:

337

Industry Type:

Furniture and Home Furnishings Manufacturing

Homepage:

enwork.com

IP Addresses:

0

Company ID:

ENW_2119143

Scan Status:

In-progress

AI scoreEnwork Risk Score (AI oriented)

Between 700 and 749

https://images.rankiteo.com/companyimages/enwork.jpeg
Enwork Furniture and Home Furnishings Manufacturing
Updated:
  • Powered by our proprietary A.I cyber incident model
  • Insurance preferes TPRM score to calculate premium
globalscoreEnwork Global Score (TPRM)

XXXX

https://images.rankiteo.com/companyimages/enwork.jpeg
Enwork Furniture and Home Furnishings Manufacturing
  • Instant access to detailed risk factors
  • Benchmark vs. industry & size peers
  • Vulnerabilities
  • Findings

Enwork Company CyberSecurity News & History

Past Incidents
1
Attack Types
1
EntityTypeSeverityImpactSeenBlog DetailsIncident DetailsView
EnworkBreach10056/2023
Rankiteo Explanation :
Attack threatening the organization's existence

Description: The Maine Office of the Attorney General reported a data breach involving Enwork on September 18, 2023. The breach occurred on June 14, 2023, due to an external system breach (hacking) and affected 1,825 individuals, including at least one resident of Maine. The compromised information includes Social Security Numbers, and identity theft protection services have been offered for 12 months through TransUnion.

Enwork
Breach
Severity: 100
Impact: 5
Seen: 6/2023
Blog:
Rankiteo Explanation
Attack threatening the organization's existence

Description: The Maine Office of the Attorney General reported a data breach involving Enwork on September 18, 2023. The breach occurred on June 14, 2023, due to an external system breach (hacking) and affected 1,825 individuals, including at least one resident of Maine. The compromised information includes Social Security Numbers, and identity theft protection services have been offered for 12 months through TransUnion.

Ailogo

Enwork Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

🔒
Incident Predictions locked
Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

🔒
A.I. Risk Score Predictions locked
Access Monitoring Plan
statics

Underwriter Stats for Enwork

Incidents vs Furniture and Home Furnishings Manufacturing Industry Average (This Year)

No incidents recorded for Enwork in 2025.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Enwork in 2025.

Incident Types Enwork vs Furniture and Home Furnishings Manufacturing Industry Avg (This Year)

No incidents recorded for Enwork in 2025.

Incident History — Enwork (X = Date, Y = Severity)

Enwork cyber incidents detection timeline including parent company and subsidiaries

Enwork Company Subsidiaries

SubsidiaryImage

You can tell a lot about a company by the company it keeps. Here at Enwork, we work with clients that are leaders in productivity, innovation, intuitive design and creative thinking - clients like Tesla, AirBnB, Lyft, Yeti and Netflix. These organizations want workspaces that not only meet their needs for agility and productivity but also reflect their innovative values and culture. It's why they come to Enwork. At Enwork, we stay ahead of trends to anticipate how to best optimize spaces, and design with creative forethought into how things can adapt for the future. Our products are created using a variety of material choices that beautifully prove their long-term value. We understand that what our clients invest in today must work for tomorrow. We service our clients with the same focus on speed and agility. Our product development is rapid, our processes are adaptive and our teams are always on high alert. It's why we can count many fast-moving firms among our valued clients, and it's why we continue to grow at a record-breaking pace.

Loading...
similarCompanies

Enwork Similar Companies

We are a company with strong values. We are committed to excellence in everything we do for our clients, for each other and for Britain’s interior architectural heritage. From the first conversations we hold with our clients, through creative space planning and drawings, to final installation, we p

Community Playthings UK

We believe creative play is essential to childhood. Community Playthings produces solid wood furniture and play equipment to support play and creativity in nurseries and primary schools. Play is a child’s natural means of expression and discovery. When children re-enact their lives in play with o

Peak Season, Inc.

Peak Season strives to define and lead the market with growth into the future in the area of fine outdoor casual furnishings and items for the entire outdoor living marketplace. Designing with only the finest raw materials and using a quality-focused factory to provide you years of enjoyment, Peak S

American Furniture Repair

Small, family-owned and operated in Middle TN. We do warranty and non-warranty in-home furniture repair. Mechanism replacement, upholstery parts/panel replacement, stitching, frame repair. Factory authorized representative for Catnapper, Lane, Flexsteel, Klaussner, Southern Motion, Lazboy and more.

Franka is the Australian home of high-quality, durable furniture - where timeless design meets the demands of everyday life. Franka is built on the principle of delivering beautifully proportioned, fuss-free furniture and home accessories that elevate your living space and withstand the test of tim

LIPO Einrichtungsmärkte AG

Das schweizerische Unternehmen LIPO ist eines der grössten Einrichtungsmärkte hierzulande. Im Jahr 1976 wurde das Unternehmen als LIPO Möbelposten gegründet. Innerhalb weniger Jahre etablierte es sich als erfolgreiches Unternehmen auf dem Schweizer Möbelmarkt. Im Laufe der Jahre expandierte das Unte

newsone

Enwork CyberSecurity News

August 01, 2025 03:30 AM
Early careers

Develop your skills alongside leaders with a global organization that values your growth and encourages you to improve the health care landscape.

January 30, 2025 10:31 AM
Priorities for the international agenda of EU’s digital policy in the 2024-2029 mandate

Lessons from the last European Commission's mandate (2019-2024) show that the international engagement of the European Union institutions in technology...

December 16, 2022 08:00 AM
The geopolitical implications of the EU’s Media Freedom Act

This paper calls for the EU Media Freedom Act to broaden its ties with other existing EU documents.

faq

Frequently Asked Questions

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.

Enwork CyberSecurity History Information

Official Website of Enwork

The official website of Enwork is http://enwork.com/.

Enwork’s AI-Generated Cybersecurity Score

According to Rankiteo, Enwork’s AI-generated cybersecurity score is 713, reflecting their Moderate security posture.

How many security badges does Enwork’ have ?

According to Rankiteo, Enwork currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Does Enwork have SOC 2 Type 1 certification ?

According to Rankiteo, Enwork is not certified under SOC 2 Type 1.

Does Enwork have SOC 2 Type 2 certification ?

According to Rankiteo, Enwork does not hold a SOC 2 Type 2 certification.

Does Enwork comply with GDPR ?

According to Rankiteo, Enwork is not listed as GDPR compliant.

Does Enwork have PCI DSS certification ?

According to Rankiteo, Enwork does not currently maintain PCI DSS compliance.

Does Enwork comply with HIPAA ?

According to Rankiteo, Enwork is not compliant with HIPAA regulations.

Does Enwork have ISO 27001 certification ?

According to Rankiteo,Enwork is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Industry Classification of Enwork

Enwork operates primarily in the Furniture and Home Furnishings Manufacturing industry.

Number of Employees at Enwork

Enwork employs approximately 101 people worldwide.

Subsidiaries Owned by Enwork

Enwork presently has no subsidiaries across any sectors.

Enwork’s LinkedIn Followers

Enwork’s official LinkedIn profile has approximately 4,221 followers.

NAICS Classification of Enwork

Enwork is classified under the NAICS code 337, which corresponds to Furniture and Related Product Manufacturing.

Enwork’s Presence on Crunchbase

No, Enwork does not have a profile on Crunchbase.

Enwork’s Presence on LinkedIn

Yes, Enwork maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/enwork.

Cybersecurity Incidents Involving Enwork

As of November 28, 2025, Rankiteo reports that Enwork has experienced 1 cybersecurity incidents.

Number of Peer and Competitor Companies

Enwork has an estimated 2,617 peer or competitor companies worldwide.

What types of cybersecurity incidents have occurred at Enwork ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

How does Enwork detect and respond to cybersecurity incidents ?

Detection and Response: The company detects and responds to cybersecurity incidents through an third party assistance with transunion..

Incident Details

Can you provide details on each incident ?

Incident : Data Breach

Title: Enwork Data Breach

Description: The Maine Office of the Attorney General reported a data breach involving Enwork on September 18, 2023. The breach occurred on June 14, 2023, due to an external system breach (hacking) and affected 1,825 individuals, including at least one resident of Maine. The compromised information includes Social Security Numbers, and identity theft protection services have been offered for 12 months through TransUnion.

Date Detected: 2023-06-14

Date Publicly Disclosed: 2023-09-18

Type: Data Breach

Attack Vector: External System Breach (Hacking)

What are the most common types of attacks the company has faced ?

Common Attack Types: The most common types of attacks the company has faced is Breach.

Impact of the Incidents

What was the impact of each incident ?

Incident : Data Breach ENW816080425

Data Compromised: Social security numbers

Identity Theft Risk: High

What types of data are most commonly compromised in incidents ?

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Social Security Numbers and .

Which entities were affected by each incident ?

Incident : Data Breach ENW816080425

Entity Name: Enwork

Entity Type: Company

Customers Affected: 1825

Response to the Incidents

What measures were taken in response to each incident ?

Incident : Data Breach ENW816080425

Third Party Assistance: Transunion.

How does the company involve third-party assistance in incident response ?

Third-Party Assistance: The company involves third-party assistance in incident response through TransUnion, .

Data Breach Information

What type of data was compromised in each breach ?

Incident : Data Breach ENW816080425

Type of Data Compromised: Social security numbers

Number of Records Exposed: 1825

Sensitivity of Data: High

Personally Identifiable Information: Social Security Numbers

References

Where can I find more information about each incident ?

Incident : Data Breach ENW816080425

Source: Maine Office of the Attorney General

Date Accessed: 2023-09-18

Where can stakeholders find additional resources on cybersecurity best practices ?

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Maine Office of the Attorney GeneralDate Accessed: 2023-09-18.

Post-Incident Analysis

What is the company's process for conducting post-incident analysis ?

Post-Incident Analysis Process: The company's process for conducting post-incident analysis is described as Transunion, .

Additional Questions

Incident Details

What was the most recent incident detected ?

Most Recent Incident Detected: The most recent incident detected was on 2023-06-14.

What was the most recent incident publicly disclosed ?

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2023-09-18.

Impact of the Incidents

What was the most significant data compromised in an incident ?

Most Significant Data Compromised: The most significant data compromised in an incident were Social Security Numbers and .

Response to the Incidents

What third-party assistance was involved in the most recent incident ?

Third-Party Assistance in Most Recent Incident: The third-party assistance involved in the most recent incident was transunion, .

Data Breach Information

What was the most sensitive data compromised in a breach ?

Most Sensitive Data Compromised: The most sensitive data compromised in a breach was Social Security Numbers.

What was the number of records exposed in the most significant breach ?

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 187.0.

References

What is the most recent source of information about an incident ?

Most Recent Source: The most recent source of information about an incident is Maine Office of the Attorney General.

cve

Latest Global CVEs (Not Company-Specific)

Description

ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.

Risk Information
cvss4
Base: 6.2
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).

Risk Information
cvss3
Base: 9.9
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint

Risk Information
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Description

Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.

Description

Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.

Access Data Using Our API

SubsidiaryImage

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?linkedin_id=enwork' -H 'apikey: YOUR_API_KEY_HERE'

What Do We Measure ?

revertimgrevertimgrevertimgrevertimg
Incident
revertimgrevertimgrevertimgrevertimg
Finding
revertimgrevertimgrevertimgrevertimg
Grade
revertimgrevertimgrevertimgrevertimg
Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network Security

Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)

Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)

Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat Intelligence

Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Top LeftTop RightBottom LeftBottom Right
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.
Users Love Us Badge