Coca-cola Halts Fairlife Dairy Operations Due to Ransomware Attack

WHO:

Engadget - Coca-Cola is the parent company of Fairlife, the dairy unit affected by the attack.

WHAT:

[10:37 AM EDT] - CBS News - Coca-Cola stated that the full scope, nature, and impacts of the incident are not yet known.

[10:37 AM EDT] - CBS News - Coca-Cola has not disclosed the timing of the cyberattack.

[10:37 AM EDT] - Fast Company - The cyberattack is described as a ransomware event, indicating that the hackers sought to lock up parts of Fairlife's operations to demand a payment.

[10:37 AM EDT] - CBS News - Fairlife's milk products are among the fastest-growing brands in dairy, driven by consumer interest in high-protein drinks.

[10:37 AM EDT] - CBS News - By 2022, Fairlife was selling more than $1 billion in premium-priced protein-rich milk drinks.

[10:37 AM EDT] - Fast Company - Ransomware attacks were up by 20% in the first half of 2026, reaching a new baseline of 2,500 incidents per quarter, according to a recent cybersecurity report from NordStellar.

[10:37 AM EDT] - CBS News - Coca-Cola stated that operations in Canada are running normally despite the cyberattack affecting U.S. production.

[10:37 AM EDT] - CBS News - Coca-Cola is working diligently to complete the investigation and restore the systems and impacted operations.

[10:37 AM EDT] - CBS News - An unauthorized third-party user accessed Fairlife milk's production systems, which Coca-Cola believes was a ransomware event.

[10:37 AM EDT] - CBS News - Coca-Cola stated that the breach has not affected product quality or safety.

[10:37 AM EDT] - CBS News - Coca-Cola purchased Fairlife from Select Milk Producers in 2020 for roughly $7 billion.

[10:37 AM EDT] - CBS News - Annual sales from Fairlife, which includes milk and protein shakes, top $3 billion.

TechRadar - Coca-Cola confirmed the ransomware attack on Fairlife in an 8-K form filed with the SEC.

Newsweek - Fairlife has temporarily suspended operations in the United States after it was hit by a serious cyberattack on Thursday.

Newsweek - The cyberattack has impacted Coca-Cola's $4 billion milk brand in the US.

Engadget - Coca-Cola has halted operations at its Fairlife dairy company due to a ransomware attack.

TechCrunch - Dairy production at Fairlife will "remain suspended" in the United States following the hack.

WHERE:

Engadget - The operations affected are located in the United States.

WHY:

Engadget - The suspension of operations is a direct result of a ransomware attack.

HOW:

[10:37 AM EDT] - CBS News - Coca-Cola has looped in law enforcement and external cybersecurity experts into the investigation of the cyberattack.

[10:37 AM EDT] - Fast Company - Two prominent ransomware-as-a-service groups are driving many of the attacks, breaching systems in industries like healthcare and government to squeeze their marks with AI-powered campaigns.

[10:37 AM EDT] - CBS News - Coca-Cola began investigating the incident with the help of external cybersecurity experts and has notified law enforcement.

TechCrunch - The method of disruption was a hack that led to the suspension of production.

(UPDATED July 17, 2026 20:21 UTC)

Coca-Cola has reported a ransomware cyberattack affecting Fairlife's operations, although the full scope and impacts of the incident are still unclear. The company has not disclosed when the attack occurred but has engaged law enforcement and external cybersecurity experts to assist with the investigation. As the situation develops, Coca-Cola is working to understand the extent of the breach and its implications.

(UPDATED July 17, 2026 19:19 UTC)

Fairlife's milk products are rapidly gaining popularity, becoming one of the fastest-growing brands in dairy, largely due to the rising consumer demand for high-protein drinks, with sales surpassing $1 billion in premium-priced protein-rich milk drinks by 2022. Meanwhile, ransomware attacks have surged by 20% in the first half of 2026, reaching a staggering 2,500 incidents per quarter, according to a recent cybersecurity report from NordStellar. Two major ransomware-as-a-service groups are responsible for many of these attacks, targeting sectors like healthcare and government with sophisticated AI-powered campaigns.

(UPDATED July 17, 2026 18:25 UTC)

Coca-Cola has announced that its operations in Canada are running normally, even as a cyberattack continues to affect production in the U.S. The company is actively working to complete its investigation and restore the systems and operations that have been impacted. They are committed to resolving the situation as quickly as possible.

(UPDATED July 17, 2026 15:25 UTC)

Coca-Cola is investigating a ransomware event involving unauthorized access to Fairlife milk's production systems, although the company assures that product quality and safety remain unaffected. Fairlife, which Coca-Cola acquired for about $7 billion in 2020, generates annual sales exceeding $3 billion from its milk and protein shakes. The company is working with external cybersecurity experts and has notified law enforcement as part of their response to the breach.

(UPDATED July 17, 2026 14:28 UTC)

Coca-Cola has confirmed that Fairlife was the target of a ransomware attack, as detailed in an 8-K form filed with the SEC. The announcement was made at 14:28 UTC and highlights the ongoing challenges companies face with cybersecurity. This incident underscores the importance of robust security measures in protecting sensitive information.

(UPDATED July 17, 2026 13:27 UTC)

Fairlife has temporarily suspended operations in the United States following a serious cyberattack that occurred on Thursday. This incident has significantly impacted Coca-Cola's $4 billion milk brand in the country. The company is currently assessing the situation and working to restore its operations.

(UPDATED July 17, 2026 08:39 UTC)

Coca-Cola has halted operations at its Fairlife dairy company due to a ransomware attack, which has caused dairy production in the United States to remain suspended. This disruption is a direct result of the hack that targeted Fairlife's operations. As a consequence, the company is currently unable to produce dairy products while it addresses the situation.