Coca-Cola Reports Ransomware Attack on Fairlife, Halts US Production

Coca-Cola disclosed a ransomware attack on its Fairlife dairy unit in an SEC filing, leading to a temporary production halt in the US. The company says Canadian operations and product safety are unaffected.

This article was drafted with AI assistance from multiple sources and was reviewed and approved by a human editor before publication.

Coca-Cola has revealed that its Fairlife dairy subsidiary suffered a ransomware attack, prompting a temporary suspension of production at its US facilities. The disclosure was made in an SEC Form 8-K filing.

According to the company, Fairlife detected unauthorized access to its systems, including those related to production. Coca-Cola says it activated incident response and business continuity protocols and is investigating the incident with the help of outside advisors and cybersecurity experts. Law enforcement has also been notified.

Coca-Cola emphasized that product quality and safety have not been compromised and that Canadian production operations remain unaffected. Fairlife manufactures ultra-filtered milk, protein shakes, and nutrition drinks in the United States.

The full impact of the attack has not yet been determined. Coca-Cola did not disclose whether any data was stolen, whether an extortion demand was made, or which ransomware group is responsible. As of July 16, 2026, no ransomware gang had claimed responsibility for the attack. A Coca-Cola spokesperson declined to provide additional comment beyond the public statement.