Manager – Sales Operations

Anubis ransomware gang claims attack on Coca-Cola's Fairlife, threatens to leak stolen data. by Nikolaus Dreher Security News Published: 2026 July 22, 08:32 The Anubis ransomware gang has claimed responsibility for the cyberattack that recently disrupted operations at Fairlife, the dairy company owned by Coca-Cola. The group alleges it stole approximately one terabyte of corporate data and has threatened to publish the information unless an undisclosed ransom demand is met. At the time of writing, Coca-Cola has not confirmed whether data was exfiltrated or commented on Anubis' claims. The claim appeared on Anubis' dark web leak site several days after Coca-Cola disclosed that Fairlife had suffered a ransomware incident affecting production systems. In its earlier disclosure, the company said an unauthorized third party had accessed portions of Fairlife's infrastructure, including systems used in manufacturing. As a precaution, Fairlife temporarily suspended production at all of its U.S. facilities while recovery efforts began. Canadian production sites were not affected, and Coca-Cola said product quality and safety had not been compromised. According to the ransomware group's post, the attackers obtained roughly one terabyte of internal company data during the intrusion. However, Anubis has not released evidence verifying the full extent of the alleged theft, and Coca-Cola has not confirmed whether sensitive corporate information or customer data was accessed. Like many ransomware operations, the group is using the threat of publishing stolen files to pressure the victim into paying a ransom. Fairlife, headquartered in Chicago, produces ultra-filtered milk, protein shakes, and other dairy products that are distributed throughout the United States. The company has grown into one of Coca-Cola's fastest-expanding businesses, generating billions of dollars in annual retail sales. The temporary shutdown of U.S. production highlighted the operational impact the cyberattack had on the company's manufacturing systems, although Coca-Cola has not disclosed how long recovery is expected to take. After detecting the incident, Coca-Cola activated its incident response and business continuity procedures and retained external cybersecurity specialists to assist with the investigation. The company also notified law enforcement authorities and said it is continuing to assess the scope and business impact of the attack. Coca-Cola has not indicated whether it has been in contact with the attackers or whether any ransom demand has been received directly. Anubis is a relatively recent ransomware operation that combines data theft with extortion. According to security researchers, the group has also employed destructive tactics, including file-wiping capabilities, to increase pressure on victims during negotiations. Whether those techniques were used during the Fairlife incident has not been confirmed.

Coca-Cola ransomware attack halts Fairlife dairy production. technology TrendPulse AI Analysis This article covers technology trends, sourced from TechCrunch. Its AI system has analyzed the key points and extracted the most relevant insights for decision-makers. Below is the structured breakdown of the original content. Quick summary. * Coca-Cola has officially suspended production at its Fairlife dairy subsidiary following a disruptive ransomware attack that compromised critical operational systems. * While U.S. operations remain offline indefinitely, the company confirmed that Canadian facilities are currently unaffected by the security breach. * This incident highlights the growing vulnerability of large-scale food and beverage supply chains to sophisticated cyber-extortion tactics. Key details. In a recent filing with the U.S. Securities and Exchange Commission (SEC), the beverage giant disclosed that its Fairlife division fell victim to a ransomware incident that forced an immediate shutdown of production lines across the United States. The company has not provided a specific timeline for system restoration, leaving the duration of the operational halt uncertain. Fairlife represents a significant revenue stream for the parent company, with annual sales reaching an estimated $4 billion as of 2024. By targeting such a high-volume subsidiary, attackers have successfully created a bottleneck that threatens to disrupt the distribution of dairy products to retailers nationwide. The company said that its Fairlife production operations across the United States are "temporarily suspended." Why this matters. This attack serves as a stark reminder that the food and beverage sector is increasingly becoming a primary target for cybercriminals. Unlike digital-only services, manufacturing entities face the dual threat of data theft and physical production downtime, which can lead to immediate supply chain shortages and significant revenue loss. Previous industry incidents, such as those involving Arizona Beverages and UNFI, demonstrate that these disruptions can last for weeks, often resulting in empty grocery shelves and long-term logistical headaches. For executives and investors, this event underscores the urgent need for robust cybersecurity resilience and incident response planning within industrial operations. As companies integrate more IoT and automated systems into their production lines, the attack surface expands, making it essential to prioritize network segmentation and offline backup protocols to mitigate the impact of future ransomware threats. The bottom line. The Fairlife production shutdown highlights the critical need for beverage manufacturers to harden their operational technology against ransomware to prevent cascading supply chain failures. This article has been processed and analyzed by TrendPulse AI for informational purposes. Content may have been summarized or restructured for clarity.