UFP Technologies disclosed an attack that reached company data and said shipments will slip in the short term, without a material financial impact expected. UFP builds components and finished devices for medical OEMs, so the delay lands in someone else’s supply plan.
Supplier questionnaires usually ask about quality systems and capacity. This is the reminder to ask about incident response and recovery time too, because a contract manufacturer outage turns into your backorder without ever touching your network.
Questions & Answers
What happened at UFP Technologies?
The contract manufacturer disclosed in February 2026 a cyberattack that reached company data and warned of short-term shipment delays, with no material financial impact expected.
Why does a contract manufacturer incident matter to device makers?
UFP builds components and finished devices for medical OEMs, so its outage lands in customers’ supply plans as backorders. Supplier reviews should cover incident response and recovery time, not just quality and capacity.