Ransomware

Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack

The company has yet to determine the full scope, nature, and impact of the incident.

Coca-Cola Fairlife ransomware

American soft drinks giant Coca-Cola announced Thursday that it has suspended production at its subsidiary Fairlife after detecting a ransomware attack.

Based in Chicago, Fairlife is a Coca-Cola wholly owned dairy company that distributes ultra-filtered milk in five flavors: chocolate, fat-free, reduced fat, strawberry, and whole milk.

In a July 16 filing with the US Securities and Exchange Commission (SEC), Coca-Cola said hackers had accessed a portion of Fairlife’s systems, including production-related systems.

“After detecting the issue, the Company promptly activated its incident response and business continuity protocols. The Company’s investigation and assessment of the impact of the incident is ongoing, with the assistance of outside advisors and cybersecurity experts,” Coca-Cola said.

The company told the SEC it has notified law enforcement of the attack and that it has yet to determine the full scope, nature, and impact of the incident.

“Product quality and safety have not been impacted. However, as a result of the incident, production operations at Fairlife in the United States are temporarily suspended. Fairlife’s Canada production operations are not currently impacted,” the company said.

Advertisement. Scroll to continue reading.

Coca-Cola said it is scrambling to complete its investigation into the attack and to determine whether the incident will have any material impact.

The company has not shared details on how the incident occurred, who was behind it, or whether it has received any extortion demands from the attackers. SecurityWeek has emailed Coca-Cola for additional information and will update this article if the company responds.

SecurityWeek has not seen any known ransomware groups claim responsibility for the incident.

Related: Synopsys Finds No Evidence of Data Breach Amid Bosch Hack Claims

Related: Centers Laboratory Data Breach Affects 540,000 Individuals

Related: 12 Million Impacted by Data Breach at Japanese Telco KDDI

Related: Mount Royal University Confirms Data Stolen in Ransomware Attack

Related Content

Cybercrime

Zohar Pinhasi was paying ransoms to obtain decryption keys and then charging victims substantially more for remediation.

Cybercrime

The individual was detained in May and has been extradited to Germany to face hacking charges.

Data Breaches

Hackers stole patient information from Clover Health Investments and AngMar Management Services in July.

Malware & Threats

The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025.

Cybercrime

Police took control of KillSec’s leak site and secured at least 110 terabytes of data stolen from victims.

Cybercrime

Karen Vardanyan has also been ordered to pay over $1.2 million in restitution to victims.

Cybercrime

Oleksii Oleksiyovych Lytvynenko has been sentenced to 4 years in prison after he was arrested in Ireland in 2023.

Data Breaches

The company has notified the SEC that hackers accessed patient, employee, provider, business, and financial information.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version