UFP Technologies, a Massachusetts-based manufacturer of medical devices and sterile packaging, recently disclosed a cybersecurity incident involving the theft and destruction of company data.

Key Details of the Attack:

• Detection: The company discovered suspicious activity on its IT systems on February 14, 2026.
• Nature of Incident: UFP’s CFO described it as a “classic ransomware attack” during a February 25 earnings call. Hackers exfiltrated files and, in some cases, destroyed data.
• Systems Affected: The breach impacted several internal functions, specifically those used for billing and creating customer delivery labels.
• Operational Impact: While many IT systems were disrupted, UFP reported that its operations continued “in all material respects” due to existing contingency plans and data backup systems.
• Response: The company engaged external cybersecurity advisors, isolated affected systems, and has since removed the threat from its network.