Medical Device Maker Reports Data Theft Hack to SEC

Attack Spotlights Threats, Risks Facing Healthcare Supply Chain Marianne Kolbasuk McGee (HealthInfoSec) • February 25, 2026

UFP Technologies, a Massachusetts-based maker of single-use medical devices and other healthcare supplies, has notified the U.S. Securities and Exchange Commission of a cyber incident discovered on Valentine's Day that involved the theft or destruction of some company data.

See Also: AI vs. AI: Leveling the Defense Playing Field

In a SEC filing on Tuesday, UFP said it detected suspicious activity in its IT systems on Feb. 14. The company said it took immediate steps to contain and remediate the incident, including isolating the affected systems.

UFP told the SEC it believes the threat actor responsible for the incident has been booted from the company's ...