UFP Technologies Reports Data Theft Following Cyberattack

UFP Technologies, an American medical device manufacturer, reported a cyberattack to the U.S. Securities and Exchange Commission (SEC) on February 24, 2026. 

The incident impacted multiple IT systems such as billing and the generation of shipping labels for customer deliveries. The compromised data may include:

• Billing records and financial documentation
• Customer delivery label information
• Internal company-related files and documents
• Potentially sensitive personal information (currently under investigation)

The nature of the attack and the number of affected individuals is not disclosed. UFP Technologies engaged external cybersecurity advisors to assist in a forensic investigation. The organization used data backup systems to restore impacted information.