Company Details
university-loft-co-
95
2,051
337
uloft.com
0
UNI_1278835
In-progress

University Loft Co. Company CyberSecurity Posture
uloft.comSince 1986, University Loft Company has been a leader in contract furniture serving more than 1200 higher education customers, both on-campus and off with partnerships with developers across the country. Throughout the world, our armed forces rely on our GSA division to meet their furnishing needs. ULoft also provides premium cabinets through its building materials division. Our passion is elevating people through quality products, whether our custom-made upholstery, industry-leading solid wood lines, to innovative products that offer maximum value featuring laminate, metal, or other materials that bring style, durability, and affordability together. Visit our warehouse and world headquarters in Greenfield, Indiana, or see how our upholstery — sofas, loveseats, and lounge chairs are made-to-order in our manufacturing plant in Tennessee.
Company Details
university-loft-co-
95
2,051
337
uloft.com
0
UNI_1278835
In-progress
Between 750 and 799

ULC Global Score (TPRM)XXXX



No incidents recorded for University Loft Co. in 2025.
No incidents recorded for University Loft Co. in 2025.
No incidents recorded for University Loft Co. in 2025.
ULC cyber incidents detection timeline including parent company and subsidiaries

Since 1986, University Loft Company has been a leader in contract furniture serving more than 1200 higher education customers, both on-campus and off with partnerships with developers across the country. Throughout the world, our armed forces rely on our GSA division to meet their furnishing needs. ULoft also provides premium cabinets through its building materials division. Our passion is elevating people through quality products, whether our custom-made upholstery, industry-leading solid wood lines, to innovative products that offer maximum value featuring laminate, metal, or other materials that bring style, durability, and affordability together. Visit our warehouse and world headquarters in Greenfield, Indiana, or see how our upholstery — sofas, loveseats, and lounge chairs are made-to-order in our manufacturing plant in Tennessee.


Hypnos is proud to be the first Carbon Neutral bedmaker in the world, and to have been carbon neutral since 2011. We have received the prestigious Queen’s Award for Enterprise for International Trade and also for Sustainable Development. Hypnos handcrafts sustainably-designed beds and mattresses, us

Seaboard Mattress and Furniture Myrtle Beach, SC has a wide selection of furniture and mattresses at prices far below retail! Buy Furniture and Mattress sets factory direct and save up to 80% off retail prices. With Seaboard Furniture and Mattress, you have exclusive access to brand-name manufacture

Moret. A mix of culture, experience, interaction among various professionals, high technology and modern entrepreneurship. With locations in Vicenza and Milan, Moret is founded on the deep knowledge of aesthetic quality and materials gained by the Pashamoglu family over more than thirty-five years

Sleep Train was founded in 1985 and is ranked the #1 mattress retailer on the West Coast. Sleep Train has nearly locations that span the West Coast and more than 1,500 employees. Sleep Train offers its employees one of the most robust training programs in the industry, comprehensive benefits, p

Over 50 years in business based in Quebec, Canada. MONARCH SPECIALTIES is a leader in the Furniture and Home Décor market. We are focused on developing innovative and exciting products. We have invested in the latest technology and systems which allows us to grow as a company and develop the most

Furniture Mart USA is a proud, family-owned furniture retail operation. Founded in 1976 by William A. Hinks, we have grown from a single location in Sioux Falls, SD to number 50 on the list of America’s Top 100 Furniture retailers, with 50+ retail store locations within the upper Midwest, spanning a
.png)
By Apoorva Chhabra. CIOs often struggle to convey the true value of cybersecurity to their organizations and secure buy-in from C-suite...
Microsoft to block unauthorized scripts in Entra ID logins, new legislation targets scammers that use AI, ASUS patches AiCloud...
Mobile operators are so overwhelmed by fragmented cybersecurity rules that they are actually at greater risk of being hacked.
White Pearl Technology Group AB announced the successful integration of recent acquisitions in smart infrastructure, the establishment of a...
The programme will be delivered across India through a hybrid model, combining direct engagement with universities and collaboration with...
~Reaffirms Its Leadership as a CERT-In Empanelled Cybersecurity Partner for India's Digital Future~. New Delhi, India – November 28,...
AI is transforming cybersecurity workflows, from threat modeling to vulnerability prioritization, said Bill Chen, CISO at Natera, underlining the need for...
An update from Cyviz AS ( ($DE:8P9) ) is now available. Cyviz AS has entered into a new partner contract with IBM to modernize and upgrade...
Dubai, UAE : RNTrust Group announces a high-level GCC Cybersecurity Summit taking place in Dubai on Wednesday, December 10, 2025.

Explore insights on cybersecurity incidents, risk posture, and Rankiteo's assessments.
The official website of University Loft Co. is http://www.uloft.com.
According to Rankiteo, University Loft Co.’s AI-generated cybersecurity score is 755, reflecting their Fair security posture.
According to Rankiteo, University Loft Co. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.
According to Rankiteo, University Loft Co. is not certified under SOC 2 Type 1.
According to Rankiteo, University Loft Co. does not hold a SOC 2 Type 2 certification.
According to Rankiteo, University Loft Co. is not listed as GDPR compliant.
According to Rankiteo, University Loft Co. does not currently maintain PCI DSS compliance.
According to Rankiteo, University Loft Co. is not compliant with HIPAA regulations.
According to Rankiteo,University Loft Co. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.
University Loft Co. operates primarily in the Furniture and Home Furnishings Manufacturing industry.
University Loft Co. employs approximately 95 people worldwide.
University Loft Co. presently has no subsidiaries across any sectors.
University Loft Co.’s official LinkedIn profile has approximately 2,051 followers.
University Loft Co. is classified under the NAICS code 337, which corresponds to Furniture and Related Product Manufacturing.
No, University Loft Co. does not have a profile on Crunchbase.
Yes, University Loft Co. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/university-loft-co-.
As of November 28, 2025, Rankiteo reports that University Loft Co. has not experienced any cybersecurity incidents.
University Loft Co. has an estimated 2,617 peer or competitor companies worldwide.
Total Incidents: According to Rankiteo, University Loft Co. has faced 0 incidents in the past.
Incident Types: The types of cybersecurity incidents that have occurred include .
.png)
ThingsBoard in versions prior to v4.2.1 allows an authenticated user to upload malicious SVG images via the "Image Gallery", leading to a Stored Cross-Site Scripting (XSS) vulnerability. The exploit can be triggered when any user accesses the public API endpoint of the malicious SVG images, or if the malicious images are embedded in an `iframe` element, during a widget creation, deployed to any page of the platform (e.g., dashboards), and accessed during normal operations. The vulnerability resides in the `ImageController`, which fails to restrict the execution of JavaScript code when an image is loaded by the user's browser. This vulnerability can lead to the execution of malicious code in the context of other users' sessions, potentially compromising their accounts and allowing unauthorized actions.
Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user to perform account takeover via a specially crafted email address used when switching authentication methods and sending a request to the /users/login/sso/code-exchange endpoint. The vulnerability requires ExperimentalEnableAuthenticationTransfer to be enabled (default: enabled) and RequireEmailVerification to be disabled (default: disabled).
Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via the GET /api/v4/channels/{channel_id}/common_teams endpoint
Exposure of email service credentials to users without administrative rights in Devolutions Server.This issue affects Devolutions Server: before 2025.2.21, before 2025.3.9.
Exposure of credentials in unintended requests in Devolutions Server.This issue affects Server: through 2025.2.20, through 2025.3.8.

Get company history
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Identify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.
Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.
Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.
Leverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.