Coca-Cola Confirms Data Taken in Fairlife Ransomware Attack
Summary
Coca-Cola confirmed that a ransomware intrusion at subsidiary Fairlife involved data being taken. Production at four US facilities was suspended during the investigation and has largely resumed; Anubis’s claim of stealing 1 TB remains unconfirmed.
Key points
- Coca-Cola confirmed that the Fairlife incident involved the taking of some data, but did not specify what data was affected.
- Fairlife suspended production at four US facilities while investigating and responding to the intrusion; most production has since resumed.
- The Anubis ransomware group listed Coca-Cola and Fairlife on its leak site and claimed to have stolen 1 TB of confidential data; that amount is unconfirmed.
- Anubis’s leak-site timer threatened to publish the data unless a ransom was paid.
- Coca-Cola said product quality and safety were unaffected and that retail availability was largely unimpacted.
Article Details
- Victim Organization
- Fairlife
- Incident Type
- Ransomware attack and data breach
- Data Types Exposed
- Data of unspecified type; Anubis claimed it was confidential
- Affected Data Size
- Anubis claimed 1 TB of data was stolen; this amount was not confirmed by Coca-Cola.
- Operational Impact
- Production was suspended at Fairlife facilities in the United States during the investigation and response. Coca-Cola said production had resumed at a majority of the four facilities. It reported that retail availability was largely unimpacted and product quality and safety were not affected.
- Ransom Or Extortion
- Anubis's leak site displayed a timer threatening to publish the allegedly stolen data unless a ransom was paid. The article does not report whether a ransom was paid.
- Claim Status
- confirmed