UFP Technologies reports stolen or destroyed data after suspicious IT activity

UFP Technologies, a maker of foam and film components for medical devices, disclosed on February 24, 2026 that it had detected suspicious activity in its IT systems on or about February 14. The company said some data appeared to have been stolen or destroyed, and functions such as billing and label making for deliveries were affected.

What UFP disclosed

UFP said the third party had been removed and access to affected information restored in all material respects. On data, the wording was cautious.

The company said contingency plans and backups kept operations running, that it expected insurance to reimburse a significant portion of direct costs, and that it did not consider the incident reasonably likely to be material to its finances.

Still unknown at filing

UFP had not determined whether personal information was among the exfiltrated files, and the filing does not describe the type of attack.