UFP Technologies

Summary

UFP Technologies, a Massachusetts-based medical device maker, disclosed a cyberattack that involved ransomware encrypting systems and exfiltrating files, with some data taken and then destroyed. The intrusion disrupted billing and customer delivery label systems, and the company is still assessing the extent of any personally identifiable information that may have been compromised. While the company anticipates short-term shipment delays, it does not expect the incident to have a material impact on its financial condition and believes most direct costs will be covered by insurance. Efforts are underway to restore primary information systems and resume normal operations.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On February 14, 2026, UFP Technologies detected an intrusion into its IT systems, which the company later disclosed in a regulatory filing with the Securities and Exchange Commission. The incident involved the theft of files and the disruption of several IT systems, including those used for billing and the creation of customer delivery labels. UFP Technologies described the event as a classic ransomware attack that impacted many, but not all, of its information technology systems, with data being taken and subsequently destroyed. The company stated that certain company or company‑related data appeared to have been stolen or destroyed, and its investigation found that attackers had exfiltrated files while it continued to determine what types of information were compromised and whether personal data was involved.

As a result of its contingency plans and data backup systems, UFP Technologies implemented planned solutions to address the issues posed by the incident, and it reported that its operations have continued since the detection in all material respects. The company acknowledged that the cyberattack had not had a material impact on its financial condition and expects that many of the direct costs associated with containing, investigating, and mitigating the attack will be reimbursed through insurance coverage. UFP Technologies warned that some product shipments might be delayed and noted that there could be softness in February due to the attack’s impact, but it anticipates being able to make up any shortfall during March. The firm is also evaluating what additional regulatory filings will be required as part of its response.

Chief Financial Officer Ronald Lataille indicated that the company believes its primary information systems will be restored later that week, and Chairman and CEO R. Jeffrey Bailly communicated the potential shipment delays to analysts during a quarterly conference call. UFP Technologies said it is still working to determine the full extent of any sensitive or personally identifiable information that may have been affected by the breach. The company emphasized that, at the time of the statements, no known ransomware group had claimed responsibility for the attack on its systems.

Sources

Sources available to members: 2 sources.