UFP Technologies says experienced cybersecurity incident

UFP Technologies says experienced cybersecurity incident

UFP Technologies Discloses Cybersecurity Incident Response Protocols
February 24, 2026

UFP Technologies, Inc. (UFPT) has confirmed its adherence to robust cybersecurity protocols following an unspecified incident, emphasizing its commitment to safeguarding corporate and stakeholder data. While the company has not disclosed granular details about the event, its publicly available policies outline measures to address potential breaches and ensure operational continuity.

Under UFP's Terms and Conditions of Site Use, unauthorized access to its websites—including through automated querying devices or attempts to breach security—is strictly prohibited. The company reserves the right to terminate user access for violations and cooperates with law enforcement when necessary. Additionally, UFP's sustainability report highlights its emphasis on data protection, including employee training on GDPR compliance, cybersecurity threats, and the handling of sensitive information.

The company's policies state that all users are prohibited from engaging in activities that compromise system integrity, such as submitting malicious code, overloading servers, or forging header information in emails. UFP also maintains a "Whistleblower" program to address internal reporting of cybersecurity or compliance concerns without retaliation.

While UFP has not quantified financial impacts from the incident, its Terms and Conditions explicitly limit liability to $100 for any claims arising from website use, including data-related issues. The company's sustainability report further notes investments in physical and digital security infrastructure, such as its on-site solar energy system and data privacy protocols, to mitigate risks.

UFP's Board of Directors, which includes six independent members, oversees corporate governance and risk management through committees such as the Audit Committee. The company's Code of Conduct and Ethics, reinforced through annual training, underscores its focus on transparency and accountability.

Investors are advised that UFP's response aligns with its established frameworks for cybersecurity and corporate governance. The company has not indicated material disruptions to operations or financial performance but remains committed to updating stakeholders as required.

(https://ufpt.com/terms-conditions/site-use/): UFP Technologies' Terms and Conditions of Site Use.
(https://ufpt.com/about-us/sustainability/): UFP Technologies' Sustainability Report.