Coca-Cola suspends production at its Fairlife dairy after a ransomware attack

Coca-Cola suspends Fairlife production in U.S. following ransomware attack

Coca-Cola has temporarily suspended production at its Fairlife dairy operations across the United States after the company was hit by a ransomware attack that disrupted critical systems. The beverage giant confirmed that while production has been halted, product quality and consumer safety have not been affected as it works to restore operations.

The cyberattack targeted Fairlife, Coca-Cola’s dairy subsidiary known for its ultra-filtered milk, Core Power protein shakes, and Nutrition Plan products. The company disclosed the incident in a filing with the U.S. Securities and Exchange Commission (SEC), stating that production facilities in the United States remain temporarily offline while an investigation continues. Fairlife’s manufacturing operations in Canada are operating normally and have not been impacted.

READ: Taco Bell lettuce linked to parasite outbreak in five states (July 17, 2026)

Coca-Cola said its teams are working to investigate the attack, recover affected systems, and resume production as quickly as possible. However, the company has not announced when U.S. operations will return to normal or whether any employee or customer information was accessed during the incident.

Fairlife has become one of Coca-Cola’s fastest-growing brands since the company completed its acquisition from Select Milk Producers in 2020. The dairy business generated an estimated $4 billion in sales by 2024, making it an important part of Coca-Cola’s expanding portfolio beyond soft drinks.

Authorities and company officials have not identified the group responsible for the ransomware attack, and no cybercriminal organization has publicly claimed responsibility. It also remains unclear whether the attackers demanded a ransom or managed to steal sensitive company data before disrupting operations.

READ: Netflix shares drop 10% after earnings forecast disappoints investors (July 17, 2026)

Cybersecurity experts note that ransomware attacks continue to pose a growing threat to food and beverage companies, where disruptions to manufacturing systems can interrupt supply chains and affect product availability. Similar attacks in recent years have caused extended shutdowns across the industry, highlighting the increasing risks facing critical manufacturing infrastructure.

As the investigation continues, Coca-Cola is focused on restoring production while strengthening its cybersecurity defenses. The incident serves as another reminder of the growing impact cyberattacks can have on global companies, particularly those operating large-scale manufacturing and distribution networks.