Reported by 1 outlet

Timeline

1. original reporting

   Coca-Cola Fairlife — Ransomware Attack Halts U.S. Dairy Production Nationwide

   bleepingcomputer.com · 89d ago · July 17th, 2026

   Coca-Cola has disclosed a ransomware attack against its Fairlife dairy subsidiary that has temporarily suspended all Fairlife production across the United States. In an SEC Form 8-K filing, Coca-Cola confirmed unauthorized access to Fairlife's production-related systems and activated incident response and business continuity protocols. Canadian production remains unaffected. The company has notified law enforcement but has not disclosed whether data was stolen, whether extortion demands were received, or which ransomware group is responsible. No group has claimed responsibility at this time.

   Fairlife produces ultra-filtered milk products, Core Power protein shakes, and nutrition drinks sold nationwide. The attack on a major food production and cold-chain supply chain represents a significant escalation in ransomware targeting of consumer goods infrastructure.

   Action: Monitor for ransomware group claims. Organizations in food and beverage supply chains should verify business continuity plans for ransomware scenarios affecting production systems.

   ---

2. update from bleepingcomputer.com

   Anubis Ransomware Claims Coca-Cola Fairlife Attack, Threatens 1TB Data Leak

   bleepingcomputer.com · 84d ago · July 22nd, 2026

   Previously covered July 17 (Fairlife ransomware attack, group unknown). New today: Anubis claims responsibility with 1TB data threat.

   The Anubis ransomware gang has added Coca-Cola's Fairlife dairy subsidiary to its dark web data leak site, claiming responsibility for the attack that halted U.S. Anubis alleges it stole approximately one terabyte of corporate data and threatens to publish it unless Fairlife enters negotiations by the end of the week. The disruption halted all U.S. Fairlife production; Canadian operations continue normally. Anubis has been increasingly active in 2026, primarily targeting corporate and critical infrastructure victims.

3. update from bleepingcomputer.com

   Coca-Cola Confirms Data Theft in Fairlife Ransomware Attack

   bleepingcomputer.com · 78d ago · July 28th, 2026

   Most US production has resumed, though some systems remain non-operational. The confirmation shifts this incident from a production disruption to a confirmed data breach with extortion risk.