Coca-Cola Says Ransomware Event Disrupted fairlife U.S. Production

Summary
Coca-Cola reported unauthorized access to fairlife systems, including production-related systems, in connection with a ransomware event. U.S. production is temporarily suspended; the investigation continues, and product quality and safety are unaffected.
Key points
- Coca-Cola said fairlife identified unauthorized access to part of its systems, including production-related systems, in connection with a ransomware event.
- fairlife's U.S. production operations are temporarily suspended; its Canadian production operations are not currently affected.
- Coca-Cola activated incident response and business continuity protocols and notified law enforcement.
- The company is investigating with outside advisors and cybersecurity experts and working to restore systems and impacted operations.
- The full scope and impact are not yet known; Coca-Cola said product quality and safety have not been affected.
Article Details
- Victim Organization
- fairlife, LLC
- Incident Type
- Unauthorized access to part of fairlife's systems, including production-related systems, in connection with a ransomware event.
- Disclosure Date
- 2026-07-16
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- Production operations at fairlife in the United States were temporarily suspended. Canada production operations were not impacted. Product quality and safety were not affected. The investigation and restoration efforts were ongoing, and the full scope and impact were not yet known.
- Ransom Or Extortion
- The company described the incident as a ransomware event; no ransom demand or extortion activity was disclosed.
- Claim Status
- confirmed
