Bassett Furniture Industries Inc.
Bassett Furniture cyberattack halts manufacturing and delays orders
Summary
A July 2024 cyberattack encrypted Bassett Furniture files and forced a manufacturing shutdown. Stores stayed open with impaired order processing and fulfillment. Systems were restored, with residual effects extending into August and later insurance recovery reported.
Key facts
Timeline
-
First public signal:
?
Earliest public indication of an outage, disruption, closure or other observable incident impact. The signal does not need to mention cybersecurity. -
First public cyber evidence:
?
Earliest credible public information connecting the incident or disruption to malicious cyber activity. -
Official cyber disclosure:
?
First official acknowledgment by the affected organization or an authoritative public body that the incident was cyber-related. -
Last impact seen:
?
Latest public indication that disruption, degraded operations, recovery work or unresolved impact was still ongoing.
Primary victim organization
Impacted locations
Organization types
Critical infrastructure sector
DysruptionHub coverage
Incident characteristics
Assessments
Attack mechanisms
-
Ransomware
Malware that encrypts systems or data, typically accompanied by a ransom demand.
-
Unauthorized access
Unauthorized access to systems, accounts, networks, or data.
Data impacts
-
Data encryption
Data was rendered inaccessible through unauthorized encryption, including ransomware-related encryption.
-
Data unavailable
Authorized users could not access required data because of the incident, even when the data was not encrypted, deleted, or destroyed.
Operational impacts
-
Partial service outage
A service, system, platform, or operational capability remained available only in part or with significant limitations.
-
Internal systems unavailable
Internal business, administrative, operational, or staff-facing systems were unavailable.
-
Transaction processing disruption
Business, financial, customer, administrative, or operational transactions could not be completed normally.
-
Manufacturing or production disruption
Manufacturing, production, assembly, processing, or industrial operations were reduced, stopped, or impaired.
-
Retail operations disrupted
Store, dealership, point-of-sale, inventory, fulfillment, or other retail operations were materially affected.
-
Supply chain disruption
Procurement, inventory, warehousing, shipping, delivery, vendor, or other supply-chain processes were materially affected.
-
Service delay
Services continued but with longer processing, response, delivery, or completion times.
-
Backlog created
The disruption caused an accumulation of unprocessed requests, cases, orders, records, appointments, or other work.
-
Manual workaround required
Staff or users had to rely on paper, telephone, in-person, offline, or other manual processes.
-
Staff unable to work normally
Employees or contractors were unable to perform normal duties because systems, data, facilities, or communications were unavailable.
Extortion indicators
-
Unknown extortion indicators
The incident may involve extortion, but available evidence does not establish which extortion indicators were present.
Incident narrative
Analyst assessment
A cyberattack interrupted Bassett Furniture Industries’ manufacturing and order fulfillment in July 2024. The company disclosed unauthorized activity and encrypted files on July 15 after detecting the intrusion July 10. Cyber involvement and data encryption are confirmed. Ransomware is highly likely, consistent with SecurityWeek’s reporting, but the reviewed evidence does not establish a ransom demand, payment, responsible group or initial access method.
Operational significance
Containment measures included shutting down systems, leaving manufacturing facilities idle. Stores and the online shop stayed open, although fulfillment was impaired. Woodworking Network’s initial report described the resulting interruption across retail, online and wholesale business. Staff subsequently described paper orders, and some shoppers left without completing purchases.
The company later documented interrupted domestic production and delayed retail and wholesale shipments. The company’s Oct. 9 earnings release said financial systems and manufacturing were suspended for seven days. This was a substantial interruption to physical production and customer deliveries even though investigators found no evidence of compromise to core manufacturing, order-processing or financial-reporting systems. It did not establish that industrial control equipment was directly attacked.
The third-quarter filing estimated $1 million to $2 million in lost sales and recorded approximately $98,000 in legal and remediation costs plus $609,000 in production wages during the stoppage. These figures do not represent every contributor to the quarter’s sales decline. A July 2026 company release reported about $700,000 in insurance proceeds recognized in the prior year’s second quarter for the 2024 business interruption. A September 2026 filing specified $698,000 in those proceeds, including $569,000 allocated to the retail segment. These are retrospective insurance recoveries recorded in 2025, not a new outage or evidence of a ransom payment.
Confidence and uncertainty
Furniture Today reported a restart July 17, quoting CEO Robert Spilman. That milestone did not establish the end of every operational effect. An amendment signed Aug. 5 and filed Aug. 6 said facilities were operating, fulfillment had resumed and delayed wholesale orders had been caught up, while minor operational effects persisted.
In the Oct. 10 earnings call, management described restoring data from backups and broadly normal operations within two weeks. It also described distribution inefficiencies extending into August. The third-quarter filing confirmed full restoration. The company’s 2025 annual report filed in February 2026 also describes the 2024 incident as resolved. Its financial-materiality assessment does not negate the documented production interruption. No exact end date is established. July 10 is the discovery date rather than a verified date of initial intrusion.
Bassett said it did not believe consumers’ personal information was compromised. That qualified finding does not establish an independently verified absence of all data theft. No matching claim was found in the reviewed native name and domain searches.
Analytic gaps
The reviewed evidence does not identify every affected manufacturing or distribution site, the initial access method or the exact initial-access date. It does not establish a ransom demand, payment or responsible group. The exact end of residual disruption and whether information beyond the encrypted files was taken remain unconfirmed.
Organizations involved
Impacted locations
Bassett, Virginia
The company’s headquarters is at 3525 Fairystone Park Highway in Bassett. The geographic link does not establish that every affected plant was in the community or that the headquarters itself was compromised.
Henry County, Virginia
Henry County contains the company’s headquarters at 3525 Fairystone Park Highway in Bassett. The company did not identify a complete list of affected manufacturing facilities, and countywide disruption is not established.
Sources
We reported that file encryption and a containment shutdown halted Bassett’s manufacturing and impaired order fulfillment. Retail stores and the online shop remained open.
Bassett reported unauthorized activity detected July 10, encrypted data files and a containment shutdown that stopped manufacturing and impaired order fulfillment.
The report described manufacturing still halted in Bassett’s July 15 filing, with retail and online stores open but fulfillment affected.
CEO Robert Spilman said systems and factories had resumed July 17 after four and a half lost factory days. Stores had taken orders manually without being able to process them.
The report described ransomware disrupting Bassett’s manufacturing facilities after some files were encrypted. Stores remained open, with fulfillment impaired.
Bassett said facilities were operating, fulfillment had resumed and delayed wholesale orders had been caught up, while minor operational effects remained.
Bassett said the incident suspended financial systems and manufacturing for seven days and affected its third-quarter results.
The filing confirmed restoration and estimated $1 million to $2 million in lost sales. It recorded about $98,000 in legal and remediation costs and $609,000 in production wages during the stoppage.
The annual report described the 2024 incident as resolved and said it did not have a material impact on the company.
The company reported $700,000 in insurance proceeds recognized in the prior year’s second quarter for the 2024 cyberattack’s business interruption.
The filing specified $698,000 in business interruption insurance proceeds recorded in the second quarter of 2025 for the fiscal 2024 cyber incident, including $569,000 in the retail segment.
Management described restoring data from backups, broadly normal operations within two weeks and distribution inefficiencies extending into August.
See something that needs correction?
Signed-in members can report an error, update, or missing source.