Coca-Cola has temporarily suspended production at its Fairlife dairy facilities in the United States after a ransomware attack disrupted the Company’s production systems, raising fresh concerns about the growing threat cybercriminals pose to major manufacturers.
The beverage giant disclosed the incident in a Form 8-K filed with the U.S. Securities and Exchange Commission (SEC) on July 16, 2026, confirming that while operations at its American Fairlife facilities have been paused, production in Canada remains unaffected.
Despite the disruption, Coca-Cola stressed that consumers have no reason to worry about the quality or safety of Fairlife products.
“Product quality and safety have not been impacted. However, as a result of the incident, production operations at Fairlife in the United States are temporarily suspended. Fairlife’s Canada production operations are not currently impacted,” the Company said in its filing.
### Cyberattack Forces Production Pause
According to Coca-Cola, the ransomware attack targeted systems supporting Fairlife’s U.S. operations, prompting the Company to activate its incident response and business continuity plans.
The Company said it immediately engaged external cybersecurity specialists and other advisers to investigate the breach and notified law enforcement agencies.
Although production has been halted, Coca-Cola noted that the investigation is still in its early stages and the full extent of the attack remains unknown.
“The full scope, nature and impacts of the incident are not yet known. Accordingly, the Company has not yet determined whether the incident is reasonably likely to materially affect the Company.”
The Company has not announced when production at the affected facilities will resume.
It also declined to say whether hackers accessed sensitive data, whether any information had been stolen, or if a ransom demand had been made. As of the latest update, no ransomware group has publicly claimed responsibility for the attack.
Why Fairlife Matters to Coca-Cola
The disruption is particularly significant because Fairlife has become one of Coca-Cola’s fastest-growing business segments.
Known for its premium ultra-filtered milk, **Core Power protein shakes**, and nutrition-focused dairy beverages, Fairlife has become a major growth engine for the Company as consumer demand for high-protein, health-focused products continues to rise.
The brand reportedly generated approximately $4 billion in sales during 2024, making it one of Coca-Cola’s most valuable businesses outside its traditional soft drink portfolio.
A prolonged production shutdown could therefore affect product availability across the United States, especially if inventory levels begin to decline before manufacturing resumes.
### Cyberattacks Increasingly Target Food Manufacturers
The incident highlights a growing trend of ransomware attacks targeting companies within the food and beverage industry, where production downtime can quickly translate into financial losses and supply chain disruptions.
Unlike data-only cyberattacks, ransomware incidents involving manufacturers often force companies to shut down operational technology and production systems during investigations, leading to delays in manufacturing and distribution.
Several major food and beverage companies have experienced similar incidents in recent years.
Arizona Beverages suffered production disruptions following a ransomware attack in 2019, while food distributor United Natural Foods Inc. (UNFI) experienced significant operational outages and supply chain challenges after a cyberattack last year.
The latest incident demonstrates that even some of the world’s largest consumer goods companies remain vulnerable to increasingly sophisticated cyber threats.
### Expansion Plans Face Unexpected Challenge
The cyberattack also comes at a notable time for Fairlife’s expansion.
Only months ago, Coca-Cola announced a $650 million investment to expand Fairlife’s production facility in Michigan, a project aimed at increasing manufacturing capacity to meet rising consumer demand.
While there is no indication that the expansion project has been affected, the ransomware incident underscores the importance of cybersecurity as manufacturers become increasingly dependent on interconnected digital systems to manage production, logistics and supply chains.
For now, Coca-Cola says its priority is restoring operations safely while continuing its investigation into the attack. Until production resumes, industry analysts will be watching closely to see whether the disruption has any meaningful impact on Fairlife’s product availability or Coca-Cola’s broader financial performance.
