Coca-Cola suspends Fairlife US production following ransomware attack
The cyber incident has disrupted dairy manufacturing across the United States, though Canadian facilities remain operational. No timeline for restoration has been provided.

Coca-Cola has suspended production at its Fairlife dairy operations across the United States following a ransomware attack that compromised its internal systems. The multinational beverage maker confirmed the incident in a disclosure lodged with the U.S. Securities and Exchange Commission, stating that manufacturing activities would remain halted for the foreseeable future.
The cyber incident specifically targeted production systems at Fairlife’s U.S. facilities, forcing a complete stoppage of dairy output. While the attack has disrupted operations within the United States, Coca-Cola confirmed that Fairlife’s facilities in Canada remain unaffected and continue to operate normally.
The company did not provide a specific timeline for when its production systems would be restored or when normal operations might resume. The indefinite nature of the suspension leaves the status of supply chains and product availability in the U.S. market uncertain in the immediate term.
Fairlife represents a significant revenue stream for Coca-Cola, with estimated sales reaching $4 billion in 2024. As one of the company’s major brands, the prolonged shutdown of its U.S. dairy operations could have material implications for the firm’s quarterly performance and market positioning within the dairy sector.
Ransomware attacks on food and beverage manufacturers have historically resulted in extended production halts and supply chain disruptions. Past incidents involving Arizona Beverages in 2019 and food distributor UNFI last year led to weeks-long interruptions and empty grocery shelves, highlighting the potential severity of such cyber events on consumer goods availability.
Coca-Cola has not yet detailed the full extent of data compromise or the specific financial impact beyond the immediate suspension of production. Investors and market observers will be monitoring subsequent regulatory filings for further updates on the restoration of systems and any potential liabilities arising from the breach.
