UFP Technologies Says Cyberattack Stole and Destroyed Company Data
Summary
UFP Technologies says a February 14 cyber incident compromised some IT systems and that company data appears to have been stolen or destroyed. The threat was reportedly removed; whether personal information was exfiltrated remains undetermined.
Key points
- UFP Technologies detected suspicious activity on its IT systems on February 14 and isolated affected systems, bringing in external cybersecurity advisors.
- The company’s preliminary investigation indicates data was stolen; certain company or company-related data appears to have been destroyed.
- The incident affected some, but not all, IT systems and disrupted functions including billing and customer-delivery label making.
- The company believes the responsible third party has been removed and says access to affected information has been restored in all material respects.
- UFP has not determined whether personal information was exfiltrated; it says it will notify affected individuals if required by law.
- Primary IT systems remain operational, and the company says the incident is unlikely to materially affect operations or finances.
- No ransomware group had publicly claimed responsibility at the time of publication; the nature of the attack remains unclear.
Article Details
- Victim Organization
- UFP Technologies
- Incident Type
- Cybersecurity incident involving compromised IT systems, data theft, and destruction of some company-related data; the malware and attack method are unknown.
- Data Types Exposed
- Company or company-related data; specific data types are unknown. The company had not determined whether personal information was exfiltrated.
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- The incident affected many but not all IT systems and functions including billing and label making. The company said primary IT systems remained operational, access to impacted information was restored in all material respects, and it was unlikely to have a material impact on operations or financials.
- Ransom Or Extortion
- No ransomware group had publicly claimed the attack at publication. The article says data destruction could suggest ransomware or a wiper attack, but the malware and any ransom demand or payment are unknown.
- Claim Status
- confirmed