Medical Device Maker UFP Technologies Hit by Cyberattack

"Certain Company or Company-related data appear to have been stolen or destroyed. As a result of the Company's contingency plans and data backup systems, the Company implemented planned solutions for the issues posed by the incident. The Company's operations have continued since the detection of the cybersecurity incident in all material respects."

"UFP's brief description of the incident indicates that the company has been targeted in a ransomware attack that involved both data theft and the deployment of file-encrypting malware. However, at the time of writing no known ransomware group appears to have taken credit for an attack on UFP."

UFP Technologies, a Massachusetts-based medical device manufacturer, disclosed a cybersecurity incident detected on February 14 involving the theft of files and disruption of IT systems. The attack affected billing systems and customer delivery label creation. The company's investigation confirmed that attackers exfiltrated files, though the full scope of compromised data remains under determination. UFP implemented contingency plans and data backup solutions, allowing operations to continue in all material respects. The company expects insurance to cover most investigation and containment costs. The incident appears to involve both data theft and file-encrypting malware, though no ransomware group has claimed responsibility.

Read at SecurityWeek