UFP Technologies Discloses Cybersecurity Incident Impacting Medical Device Manufacturing UFP Technologies, a publicly traded medical device manufacturer specializing in surgical tools, wound care, implants, and healthcare wearables, has reported a cybersecurity breach affecting its IT systems. The company, which employs 4,300 people and generates $600 million in annual revenue, detected suspicious activity on February 14 and immediately implemented containment and remediation measures. In an SEC filing submitted yesterday, UFP confirmed that the threat actor was removed from its systems, though data was stolen or destroyed during the attack. The incident disrupted functions such as billing and label production for customer deliveries but did not fully compromise all IT infrastructure. While the company has restored access to impacted systems, the nature of the attack potentially ransomware or a wiper variant remains unconfirmed, and no ransomware group has claimed responsibility. UFP stated that it has not yet determined whether personal data was exfiltrated but will notify affected individuals if required by law. Despite the breach, the company asserts that its core operations remain functional and that the incident is unlikely to have a material financial or operational impact. Investigations, supported by external cybersecurity experts, are ongoing.