Coca-Cola shuts down Fairlife milk production lines following ransomware attack

Coca‑Cola has confirmed a ransomware attack against its dairy subsidiary Fairlife, forcing the suspension of production operations in the United States while Canadian sites are not affected.
Incident response protocols have been activated, with the participation of third-party experts and authorities; product quality and safety were not affected
Analysts warn that the financial impact could be significant given Fairlife’s importance, with losses worsening the longer production remains offline.

Coca Cola was forced to shut down part of its operations to combat an ongoing ransomware infection.

In a Form 8-K recently filed with the U.S. Securities and Exchange Commission (SEC), the company said the attackers hit Fairlife, its dairy company.

“On July 16, 2026, The Coca-Cola Company announced that Fairlife, a company-owned dairy business, had identified unauthorized third-party access to a portion of its systems, including its production-related systems, in connection with a ransomware event,” the filing said.

Cumulative impact

Coca Cola then explained that it had launched its incident response and business continuity protocols, bringing in third-party cybersecurity experts to help investigate the attack and assess the damage. She also informed the relevant authorities.

However, production in the United States was affected, as parts of the operation had to be suspended: “Product quality and safety have not been affected. However, as a result of the incident, Fairlife’s production operations in the United States are temporarily suspended. Fairlife’s production operations in Canada are not affected at this time,” Coca Cola explained.

The company said it was currently working to restore systems and had “not yet determined whether the incident was reasonably likely to materially affect the company.”

In a statement shared with TechRadar Pro, Joseph Perry, cybersecurity researcher and head of advanced services at Arcova, emphasized that the material impact would likely be significant. Quality depends on how quickly Coca Cola moves.

“Fairlife is not a minor company buried in Coca-Cola’s portfolio. Coca-Cola generated nearly $48 billion in net revenue last year and made a $6.1 billion contingent payment related to its acquisition of fairlife, which provides important context for the deal’s value currently sitting idle,” Perry says.

“With production suspended at Fairlife’s U.S. facilities, every hour can compound the financial impact in terms of lost production, shipping delays, recovery costs, inventory exposure and potential disruption to retailers. Coca-Cola has not yet quantified the loss, but the longer production remains offline, the more quickly a cyber incident becomes a significant business event.”

Via BeepComputer