The Coca-Cola Company has revealed that a ransomware attack targeting its Fairlife dairy subsidiary has temporarily disrupted production at Fairlife facilities across the United States.
According to a filing with the U.S. Securities and Exchange Commission (SEC), Fairlife detected unauthorized access to portions of its network, including systems used in manufacturing operations. After identifying the intrusion, the company activated its incident response and business continuity plans, launched an internal investigation, engaged external cybersecurity specialists, and notified law enforcement.
Coca-Cola stated that the cyberattack has not affected the quality or safety of Fairlife products. However, production at Fairlife’s U.S. manufacturing facilities has been temporarily suspended while affected systems are restored. Operations in Canada continue to operate normally.
The company is working to recover impacted systems and resume production as quickly as possible. Coca-Cola said it is still evaluating the full scope of the incident and has not yet determined whether the attack is expected to have a material financial impact.
Fairlife, one of Coca-Cola’s dairy brands, is known for products including Ultra-Filtered Milk, Core Power Protein Shakes, and Nutrition Plan beverages sold throughout the United States.
At this stage, Coca-Cola has not confirmed whether sensitive data was stolen, whether it has received a ransom demand, or which ransomware group is behind the attack. Likewise, no known ransomware operation has publicly claimed responsibility.
If data was exfiltrated during the breach, cybersecurity experts note that attackers could later attempt to extort the company by threatening to publish stolen information unless a ransom is paid.