Thought Leadership
Coca-Cola has temporarily suspended production at its Fairlife dairy subsidiary in the United States after a cyberattack disrupted parts of the company’s IT infrastructure.
The U.S. beverage giant announced on Thursday that it had temporarily halted production at its wholly owned subsidiary, Fairlife, following a cyberattack. Unauthorized actors gained access to portions of the company’s IT environment, including systems supporting manufacturing operations. Fairlife, headquartered in Chicago, produces ultra-filtered dairy products.
In a filing submitted to the U.S. Securities and Exchange Commission (SEC) on July 16, 2026, Coca-Cola outlined the impact of the incident:
“Product quality and safety have not been affected. However, as a result of the incident, Fairlife’s production operations in the United States have been temporarily suspended. Fairlife’s production facilities in Canada are not currently affected.”
Coca-Cola
Coca-Cola Activates Incident Response and Launches Investigation
Following the discovery of the cybersecurity incident, the company immediately initiated its incident response procedures. U.S. law enforcement agencies have been notified of the attack. The full scope of the breach and any potential financial impact remain under investigation.
In its SEC filing, Coca-Cola stated:
“Upon discovery of the issue, the Company promptly activated its incident response and business continuity protocols. The Company’s investigation and assessment of the incident, with the assistance of external advisors and cybersecurity experts, remain ongoing.”
At this stage, it remains unclear how the attackers gained access to the company’s systems, whether a ransom demand was made, or which threat actor may be responsible. No known ransomware group has publicly claimed responsibility for the attack.
(ll)
