Ransomware incident at Fairlife, a subsidiary of Coca-Cola

In mid-July 2026, The Coca-Cola Company detected a cybersecurity incident that affected the IT systems of its subsidiary Fairlife, which specialises in dairy products. The company confirmed that it was a ransomware attack which compromised part of its IT infrastructure and forced it to temporarily suspend certain production operations in the United States. From the moment the intrusion was identified, the company launched an investigation to determine the scope of the incident, with the support of external cybersecurity specialists and in coordination with the relevant authorities. It also stated from the outset that the quality and safety of the products on the market had not been affected by the attack.

The incident led to the temporary suspension of production at several Fairlife facilities in the United States whilst containment and recovery efforts were carried out on the affected systems. In a subsequent update, Coca-Cola confirmed that the attackers had managed to extract certain data during the intrusion, although it did not publicly disclose the nature or volume of the compromised information. In response, the company implemented recovery measures to restore its operations, stepped up its forensic investigation and continued to collaborate with external experts and the authorities leading the investigation.

Coca-Cola has now reported that the majority of Fairlife’s production operations have been restored and that the process of restoring the systems is ongoing.

Translated with DeepL.com (free version)