American producer of medical gadgets, UFP Applied sciences, has disclosed {that a} cybersecurity incident has compromised its IT techniques and knowledge.
UFP Applied sciences is a publicly traded medical engineering and manufacturing firm that produces a broad vary of gadgets and parts utilized in surgical procedure, wound care, implants, orthopedic functions, and healthcare wearables.
The corporate employs 4,300 individuals, has an annual income of $600 million, and a market cap of $1.86 billion, in keeping with current knowledge.
In a submitting submitted yesterday with the U.S. Securities and Change Fee (SEC), UFP Applied sciences disclosed that it detected suspicious exercise on its IT techniques on February 14.
The agency instantly deployed isolation and remediation measures and engaged exterior cybersecurity advisors to assist with the investigation.
Preliminary outcomes of the investigation point out that the risk has been eliminated, however the hacker was capable of steal knowledge from compromised techniques.
“Via the Firm’s efforts, the Firm believes that the third celebration accountable for this cybersecurity incident has been faraway from the Firm’s IT techniques, and the Firm’s means to entry info impacted by this incident has been restored in all materials respects,” reads the SEC submitting.
“The incident seems to have impacted many however not the entire Firm’s IT techniques and affected features reminiscent of billing and label making for buyer deliveries. Sure Firm or Firm-related knowledge seem to have been stolen or destroyed.”
The info destruction be aware suggests a ransomware or wiper assault, though the character of the malware stays unclear.
BleepingComputer has contacted UFP Applied sciences to ask concerning the assault and whether or not it concerned knowledge encryption/ransom cost calls for, however a remark wasn’t instantly out there.
On the time of publishing, no ransomware group has publicly claimed the assault on UFP Applied sciences.
UFP Applied sciences talked about that, presently, it has not decided whether or not private info has been exfiltrated. If confirmed at a later time, notifications might be despatched to impacted people as required by legislation.
The corporate acknowledged that, regardless of the cybersecurity incident, its main IT techniques stay operational. Primarily based on present proof and assessments, UFP Applied sciences states it’s unlikely that the incident could have a cloth influence on its operations or financials.
Fashionable IT infrastructure strikes quicker than guide workflows can deal with.
On this new Tines information, learn the way your workforce can scale back hidden guide delays, enhance reliability by way of automated response, and construct and scale clever workflows on prime of instruments you already use.
