UFP Technologies discloses cybersecurity incident detected February 14, 2026
UFP Technologies disclosed a material cybersecurity incident after detecting suspicious activity in its IT systems on or about February 14, 2026. The company says the attacker has been removed, access has been restored in all material respects, and operations have continued in all material respects, though some data appears to have been stolen or destroyed and the investigation into personal information is ongoing. The company expects a significant portion of direct response costs to be reimbursed by insurance and does not believe the incident is reasonably likely to materially affect its financial condition or results of operations.
Key points
- Suspicious activity detected on or about February 14, 2026; affected billing and label making for customer deliveries
- Company says the third party has been removed and access restored in all material respects
- Certain company data appears stolen or destroyed; investigation into personal information and required notifications is ongoing
- Company expects a significant portion of direct response costs to be covered by insurance recoveries
The filing
Written by AI (Anthropic Claude, claude-haiku-5-5) on Nov 8, 2026, 6:56 AM ET, from the text of the filing and its press-release exhibits only. Written later: this filing was briefed after the fact, when past filings were added to the site, so the brief may be read with hindsight; the filing itself is the record of what was known on February 24, 2026.
Briefs are written by AI from the filing text (each brief's own page names the model) and can contain mistakes — open the filing before acting on anything. Impact (1-5) and tone are the model's reading of the filing for shareholders, not a price forecast. Not investment advice.