Fairlife hit by ransomware attack
Incident
Summary
Hide ▲
Show ▼
Fairlife, the Coca-Cola dairy subsidiary, is dealing with a ransomware incident that disrupted U.S. production after the company detected unauthorized access to production-related systems on July 16 and activated incident response and business continuity plans. The company said product quality and safety were not affected and that Canadian production continued normally. On July 21, the Anubis ransomware gang added Fairlife to its leak site, claimed responsibility, alleged it stole approximately 1 TB of data, and said it had encrypted Nutanix systems. Those claims have not been independently verified.
Timeline
-
27.07.2026 18:39 2 articles · 3d ago
Coca-Cola confirms Fairlife data theft and production recovery
Victim Impact UpdateCoca-Cola confirmed that hackers stole data from Fairlife during a ransomware attack earlier this month, said some impacted systems and operations were still being restored, and said most U.S. production had resumed. The company added that existing inventory covered temporary shortages caused by the production disruption and that product quality and safety were never jeopardized.
Show sources
- Coca-Cola confirms data theft in Fairlife ransomware attack — www.bleepingcomputer.com — 27.07.2026 18:39
- Coca-Cola Reveals Subsidiary Fairlife Suffered Data Breach — www.infosecurity-magazine.com — 28.07.2026 14:00
-
21.07.2026 21:50 1 articles · 9d ago
Anubis claims Fairlife attack and data theft
Attribution UpdateThe Anubis ransomware gang added Coca-Cola's Fairlife dairy subsidiary to its dark web leak site, claimed responsibility for the attack, alleged it stole approximately 1 TB of corporate data, and said it had fully encrypted the company's Nutanix systems.
Show sources
- Anubis ransomware claims Coca-Cola Fairlife attack, threatens data leak — www.bleepingcomputer.com — 21.07.2026 21:50
-
17.07.2026 00:09 2 articles · 13d ago
Fairlife detects unauthorized access and suspends U.S. production
Initial DisclosureFairlife, the Coca-Cola dairy subsidiary, disclosed that it detected unauthorized access to some of its systems, including production-related systems, in connection with a ransomware attack. The company said it activated incident response and business continuity protocols, and that production at Fairlife's U.S. facilities has been temporarily suspended while impacted systems are restored.
Show sources
- Coca-Cola says Fairlife ransomware attack halts US dairy production — www.bleepingcomputer.com — 17.07.2026 00:09
- Coca-Cola says Fairlife ransomware attack halts US dairy production — www.bleepingcomputer.com — 17.07.2026 00:09