The Coca-Cola Company and Fairlife: Coca-Cola says Fairlife ransomware attack halts US dairy production

Coca-Cola’s Fairlife Subsidiary Hit by Ransomware Attack, Disrupting U.S. Production

The Coca-Cola Company revealed today that its Fairlife dairy subsidiary suffered a ransomware attack, leading to temporary production halts across U.S. facilities. The incident was disclosed in an SEC Form 8-K filing, where Coca-Cola stated that Fairlife detected unauthorized access to its systems, including production-related infrastructure.

Upon discovery, the company activated incident response and business continuity protocols, engaging external cybersecurity experts and notifying law enforcement. While the investigation remains ongoing, Coca-Cola confirmed that product quality and safety have not been compromised. However, production at Fairlife’s U.S. sites has been suspended as systems are restored, with Canadian operations unaffected.

Fairlife, a Coca-Cola-owned brand specializing in ultra-filtered milk, protein shakes, and nutrition drinks, distributes products like Core Power and Fairlife Ultra-Filtered Milk nationwide. The company has not disclosed whether data was exfiltrated, if a ransom demand was made, or which ransomware group is responsible. No threat actor has claimed the attack, though if data was stolen, extortion attempts may follow.

Coca-Cola is working to resume operations but has not yet determined whether the incident will have a material financial impact. The company declined to provide further details beyond its public statement.

Source: https://www.bleepingcomputer.com/news/security/coca-cola-says-fairlife-ransomware-attack-halts-us-dairy-production/

The Coca-Cola Company TPRM report: https://www.rankiteo.com/company/the-coca-cola-company

Fairlife TPRM report: https://www.rankiteo.com/company/fairlife-llc

"id": "faithe1784240634",
"linkid": "fairlife-llc, the-coca-cola-company",
"type": "Ransomware",
"date": "7/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'dairy, protein shakes, nutrition drinks',
                        'location': 'U.S.',
                        'name': 'Fairlife',
                        'type': 'subsidiary'}],
 'description': 'The Coca-Cola Company revealed that its Fairlife dairy '
                'subsidiary suffered a ransomware attack, leading to temporary '
                'production halts across U.S. facilities. The incident was '
                'detected with unauthorized access to its systems, including '
                'production-related infrastructure. Production at Fairlife’s '
                'U.S. sites has been suspended as systems are restored, while '
                'Canadian operations remain unaffected.',
 'impact': {'downtime': 'temporary production halts',
            'operational_impact': 'production suspended at U.S. facilities',
            'systems_affected': 'production-related infrastructure'},
 'investigation_status': 'ongoing',
 'references': [{'source': 'SEC Form 8-K filing'}],
 'regulatory_compliance': {'regulatory_notifications': 'SEC Form 8-K filing'},
 'response': {'communication_strategy': 'public statement via SEC Form 8-K',
              'incident_response_plan_activated': True,
              'law_enforcement_notified': True,
              'remediation_measures': 'systems restoration',
              'third_party_assistance': 'external cybersecurity experts'},
 'title': 'Coca-Cola’s Fairlife Subsidiary Hit by Ransomware Attack, '
          'Disrupting U.S. Production',
 'type': 'ransomware'}