Ransomware Attack Forces fairlife to Halt U.S. Production

summarizeSummary

Coca-Cola disclosed a ransomware attack on its fairlife brand, suspending U.S. production. The full impact is unknown, but the incident adds operational risk to a key growth segment.

check_boxKey Events · Legal and Risk Events · KO

• Ransomware Attack on fairlife

  On July 16, 2026, unauthorized third-party access to fairlife's systems—including production-related systems—was detected, prompting a temporary suspension of U.S. production. Operations in Canada remain unaffected.

• Operational and Financial Uncertainty

  The full scope, nature, and impacts of the incident are not yet known. Coca-Cola has not determined whether the event is reasonably likely to have a material effect on the company.

• Incident Response Activated

  The company activated its incident response and business continuity protocols, engaged outside advisors and cybersecurity experts, and notified law enforcement.

• Product Quality Unaffected

  Product quality and safety have not been impacted, but the production halt could disrupt supply and sales of the fairlife brand in the U.S. market.

auto_awesomeAnalysis · KO · Manufacturing

A ransomware attack on Coca-Cola's fairlife dairy subsidiary has forced a temporary shutdown of all U.S. production. While product quality and safety are unaffected, the operational disruption and ongoing investigation introduce uncertainty around potential financial impact. fairlife is a growth brand for Coca-Cola, and any prolonged outage could dent revenue and supply chain confidence. The company has not yet determined materiality, but the incident comes amid a recent executive departure in North America and an ongoing $20B+ IRS dispute, adding to a complex risk backdrop.