< Back to situations

Get alerts on this situation

We’ll email you as it develops, and you can follow the whole thread from day one.

Unsubscribe anytime.

[SITUATION] · [ACTIVE]

5 clusters · 29 sources · 14 days · First seen 15 days ago · Last updated 1 day ago

Categories: TECHNOLOGY · BUSINESS

Coca-Cola Fairlife ransomware attack, US production resumes

Entities: Anubis · Fairlife · The Coca-Cola Company · Jennifer Mann · Fairlife LLC

Overview

Coca‑Cola disclosed on 16 July 2026 that the Anubis ransomware gang accessed part of Fairlife’s systems and exfiltrated roughly one terabyte of data, prompting a suspension of dairy manufacturing at its U.S. plants in Michigan, Arizona and New York. Production halted for nearly two weeks while Canadian facilities continued operating.

By late July most production lines at the four U.S. sites were back online, and on 27 July the company announced that the majority of production had resumed, describing “significant progress” in restoring services. Existing inventory kept retail shelves stocked, and Coca‑Cola affirmed that product quality and safety were unaffected. The incident is not expected to have a material financial impact.

Coca‑Cola engaged external cybersecurity advisers, filed a Form 8‑K, notified law enforcement and continues to monitor and secure its systems. fairlife, acquired in 2020 for about $7 billion and generating over $3 billion in annual sales, remains operational. The July 30 update reiterated that most U.S. facilities are running and highlighted the broader cyber‑risk facing food‑and‑beverage manufacturers as IT and operational‑technology environments converge.

Leadership transitions within North America continue, with President and CFO John Murphy assuming interim responsibilities for the unit.

Claims

What the coverage asserts, and how well corroborated each claim is across sources.

[● 4 SOURCES] Fairlife experienced a ransomware attack that gave unauthorized third parties access to part of its systems. (fairlife Resumes Production at Majority of US Facilities)
[● 4 SOURCES] The hacking group Anubis claimed responsibility for the attack and said it stole about 1 TB of data. (Coca‑Cola says Fairlife Resumes Production At Four US Plants After Cyberattack | ESM Magazine)
[● 4 SOURCES] Production at Fairlife’s four U.S. facilities was halted for nearly two weeks. (Coca‑Cola resumes Fairlife milk production after hackers shut down plants)
[● 4 SOURCES] As of late July, the majority of production at the four plants has resumed. (fairlife Resumes Production at Majority of US Facilities)
[● 4 SOURCES] Coca‑Cola says product quality and safety were not affected by the cyberattack. (Coca‑Cola Says Fairlife Resumes Production At Four US Plants After Cyberattack | ESM Magazine)
[● 4 SOURCES] Retail availability of Fairlife products remained largely unchanged due to existing inventory. (fairlife Resumes Production at Majority of US Facilities)
[● 4 SOURCES] Coca‑Cola does not expect the incident to have a material impact on its financial condition or results. (fairlife Resumes Production at Majority of US Facilities)
[● 4 SOURCES] Coca‑Cola purchased Fairlife in 2020 for roughly $7 billion; Fairlife’s annual sales exceed $3 billion. (Coca‑Cola resumes Fairlife milk production after hackers shut down plants)

Timeline

1 day ago

[TECHNOLOGY] 7 sources
Coca‑Cola's Fairlife dairy hit by ransomware, halting U.S. production
A ransomware attack by Anubis crippled Fairlife, Coca‑Cola’s U.S. dairy subsidiary, halting production in July 2026; most output has since resumed and retail supplies stayed largely unaffected.
4 days ago

[BUSINESS] 5 sources
Coca‑Cola’s Fairlife dairy resumes US production after ransomware attack
Coca‑Cola’s Fairlife dairy has resumed most production at its four U.S. plants after an Anubis‑claimed ransomware attack that stole ~1 TB of data; product quality, safety and retail supply remain unaffected and
9 days ago

[TECHNOLOGY] 2 sources
Fairlife US dairy production suspended after Anubis ransomware attack
Anubis ransomware claimed a breach of Fairlife, stealing ~1 TB of data and halting U.S. production, while Coca‑Cola works to restore systems.
12 days ago

[TECHNOLOGY] 5 sources
Coca-Cola Stops U.S. Fairlife Dairy Production Following Ransomware Attack
A ransomware attack forced Coca‑Cola to halt U.S. Fairlife dairy production, though Canadian output continues; product safety is unchanged and the breach’s full impact is still under investigation.
15 days ago

[BUSINESS] 14 sources
Coca-Cola's Fairlife dairy production halted in US after ransomware attack
Coca‑Cola halted US production of its Fairlife dairy brand after a ransomware attack breached production systems; Canadian operations remain open and product safety is unaffected.

Sources

1045wjjk.com · americanbazaaronline.com · apcmag.com · b2b-cyber-security.de · checkout.ie · connectedtoindia.com · cowsmo.com · creebhills.com · cybersecitalia.it · elektrotechnik.vogel.de · foodbev.com · foodinfotech.com · genderandhealth.org · infoguerra.com.br · it-boltwise.de · ithome.com · kagonma-info.com · merca20.com · miami.cbslocal.com · mymotherlode.com · nationalcybersecurity.com · news.cnyes.com · ntd.com · saferworld.org.uk · srnnews.com · uzalendonews.co.ke · wbrz.com · welivesecurity.com · wiadomoscihandlowe.pl

This summary has been updated 4 times: see revision history