Coca-Cola Resumes Fairlife Production After Anubis Ransomware Attack

The Coca-Cola Company resumed the majority of production at four Fairlife dairy manufacturing facilities in the United States on July 27, 2026. This followed a ransomware attack first detected on July 16 and 17 that forced the company to temporarily suspend U.S. operations. Production in Canada remained unaffected.

The Anubis ransomware group claimed responsibility for the breach, asserting that it encrypted Nutanix systems and stole one terabyte of data. The group threatened to leak the stolen information if ransom negotiations did not begin. In response, Coca-Cola engaged law enforcement, outside advisors, and cybersecurity experts to investigate the unauthorized access.

Coca-Cola stated that product quality and safety were not impacted. Retail availability of Fairlife products remained largely stable because the company relied on existing inventory. While work continues to restore the remaining affected systems, the company believes the incident is not reasonably likely to have a material impact on its financial condition or operating results as it prepares its second-quarter financial results.