Bleepingcomputer Coca-Cola's Fairlife Dairy Production Halted by Ransomware Attack
Article Content
- •Coca-Cola's Fairlife subsidiary suspended U.S. production due to a ransomware attack.
- •Unauthorized access was detected in production-related systems, but Canadian operations remain unaffected.
- •The full impact of the attack is under investigation, with no confirmed data breaches or ransom demands.
On July 16, 2026, Coca-Cola disclosed a ransomware attack affecting its Fairlife dairy subsidiary, leading to the suspension of all U.S. production operations. The attack involved unauthorized access to Fairlife's systems, including production-related infrastructure. As a result, production was halted as a precautionary measure, although Canadian operations remained unaffected. The company activated its incident response protocols and is working with external cybersecurity experts to assess the situation. The full scope and impact of the attack are still under investigation, and Coca-Cola has not confirmed whether any data was exfiltrated or if a ransom demand was made. Product quality and safety have not been compromised according to the company's statements. No group has claimed responsibility for the attack as of the latest updates.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (117)
Following this threat?
Track Coca-Cola in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…