Coca-Cola Confirms Data Theft and Production Disruption at Fairlife

Summary
Coca-Cola confirmed unauthorized access and data theft at Fairlife during a ransomware attack that temporarily disrupted production. Anubis claimed responsibility and said it encrypted Nutanix systems; most U.S. production has resumed.
Key points
- Coca-Cola said an unauthorized third party accessed some Fairlife systems and took certain data.
- The attack temporarily suspended production; most U.S. production has resumed, while some systems and operations are still being restored.
- Anubis claimed responsibility, demanded payment to prevent a leak, and said it encrypted Fairlife’s Nutanix systems.
- Anubis threatened to release one terabyte of allegedly stolen files; after its extortion deadline expired, the data became available for download.
- Coca-Cola reported the intrusion to authorities and did not follow the attackers’ instructions to negotiate.
Article Details
- Victim Organization
- Fairlife
- Incident Type
- Ransomware attack involving unauthorized access, data theft, and disruption to production operations.
- Data Types Exposed
- Certain company data; specific data types were not disclosed.
- Affected Data Size
- Anubis claimed one terabyte of files was stolen; the amount was not independently confirmed.
- Operational Impact
- Production operations were temporarily suspended and some systems and operations remained under restoration. Coca-Cola said most U.S. production had resumed; product quality and safety were not jeopardized.
- Ransom Or Extortion
- Anubis claimed responsibility, threatened to leak allegedly stolen files unless a ransom was paid, and made the data available after its extortion deadline expired. Coca-Cola said it did not follow the attacker’s instructions to negotiate.
- Claim Status
- confirmed
