Coca-Cola has halted production at its Fairlife dairy operations in the United States following a ransomware attack that disrupted its systems. The company disclosed the cyber incident in a filing with the U.S. Securities and Exchange Commission on July 16, 2026, confirming that production at Fairlife, an important dairy brand, remains temporarily suspended. However, the cyberattack has not affected Fairlife's Canadian operations.

Fairlife, known for its ultra-filtered milk products, had generated an estimated $4 billion in sales by 2024, making it a significant contributor to Coca-Cola’s diverse portfolio of beverages and dairy items. The suspension of production poses operational challenges for Coca-Cola as it seeks to manage the fallout from the ransomware attack on its subsidiary’s manufacturing systems, which are critical for supply chain continuity.

The incident highlights ongoing vulnerabilities within the food and beverage sector to cybersecurity threats, as similar ransomware attacks have previously caused prolonged disruptions and supply shortages. For instance, ransomware hits on Arizona Beverages in 2019 and UNFI, a major U.S. food distributor, in 2025 resulted in several weeks of operational interruption, underscoring the risks cyber threats pose to essential production lines.

Coca-Cola has not provided a timeline for when Fairlife’s production systems will be fully restored. The company continues to investigate the attack’s impact and has signaled a commitment to resolving the issue to safeguard its brand and ensure a return to normal operations as quickly as possible. Details about potential ransom demands or the perpetrators remain undisclosed, while industry watchers monitor the situation closely.