Coca-Cola halts Fairlife dairy production after ransomware attack

Coca-Cola has suspended all production at its Fairlife dairy subsidiary in the United States following a ransomware attack on the company's production systems, according to a Securities and Exchange Commission filing. The shutdown is indefinite, with no timeline provided for restoring operations. Fairlife's Canadian operations remain unaffected.

Fairlife generates an estimated $4 billion in annual sales for Coca-Cola, making it one of the beverage giant's major brands. The attack marks another significant disruption to the food and beverage sector, which has proven vulnerable to ransomware campaigns in recent years.

Previous ransomware incidents in the industry offer context for potential impact duration. Arizona Beverages experienced a multi-week production disruption in 2019 following a similar attack. Last year, food distributor UNFI faced weeks-long operational shutdowns that resulted in empty grocery shelves across multiple retailers.

Coca-Cola has not disclosed which threat actor is responsible for the attack, whether a ransom demand was made, or specific details about the scope of the breach. The company also did not comment on recovery timelines or estimated losses from the production halt.

The incident underscores persistent security challenges faced by large food and beverage manufacturers, which operate critical supply chain infrastructure that feeds directly into consumer-facing retail operations.