Ransomware Attack Shuts Down Fairlife Dairy Production in the U.S., Coca-Cola Confirms

Coca-Cola confirmed in a Form 8-K filing with the U.S. Securities and Exchange Commission that its Fairlife dairy subsidiary suffered a ransomware attack that has forced the company to temporarily suspend all U.S. production. The disclosure was made Thursday, July 16, 2026, according to Morningstar, which cited Dow Jones Newswires reporting by Josh Beckerman.

Fairlife makes ultra-filtered milk, Core Power protein shakes, and other lactose-free nutrition products. Coca-Cola bought out the remaining stake in Fairlife from Select Milk Producers back in January 2020, and the brand has grown into a major moneymaker, with estimated sales reaching $4 billion by 2024, according to TechCrunch.

The company said hackers gained unauthorized access to Fairlife's systems, including systems tied directly to production. Once discovered, Coca-Cola says it activated incident response and business continuity protocols and brought in outside cybersecurity advisors. Law enforcement has been notified, according to Bleeping Computer's review of the SEC filing.

Coca-Cola says product quality and safety have not been affected. This appears to be an operational and IT disruption, not a contamination issue. Canadian production is unaffected and continues normally.

What Coca-Cola has not said is also notable. The company has not given any timeline for restoring U.S. production. It has not disclosed whether any customer, employee, or corporate data was stolen. It has not said whether it received a ransom demand, and no ransomware gang has publicly claimed responsibility as of this writing, according to Bleeping Computer.

When Bleeping Computer asked Coca-Cola directly whether data was stolen, whether there was an extortion demand, and which hacking group was responsible, a company spokesperson said there was nothing additional to share beyond the public SEC filing. For a company still in the middle of an active investigation, staying silent is not unusual, particularly when facing potential litigation or an ongoing negotiation with attackers.

In the filing itself, Coca-Cola stated it has not yet determined whether the incident is reasonably likely to materially affect the company financially. That's standard corporate language required for SEC cyber-disclosure rules, but it leaves open the real possibility that a prolonged shutdown could hit the bottom line if it drags on for weeks.

History says that's a real risk. TechCrunch pointed to two prior cases as reference points: Arizona Beverages got hit with ransomware in 2019, and food distributor UNFI was hit last year. Both incidents caused weeks-long disruptions to production lines and led to empty shelves at grocery stores. If Fairlife follows that pattern, consumers could see supply gaps for Core Power shakes and ultra-filtered milk products in the coming weeks.

Coca-Cola also has a major expansion tied up in Fairlife right now. The company said in March 2026 that it planned to invest $650 million to expand production capacity at its Fairlife facility in Coopersville, Michigan, according to Morningstar. A prolonged shutdown complicates that investment timeline, even if it doesn't derail it outright.

Market reaction so far has been muted, with Coca-Cola shares trading around $84.00, up modestly on the day, suggesting Wall Street isn't yet treating this as a major hit to the parent company's overall business.

Key questions remain open: how long U.S. production stays down, whether any personal or corporate data was exfiltrated before systems were locked, and whether Coca-Cola faces an extortion demand it will have to decide whether to pay. Ransomware groups that steal data before encrypting systems typically threaten to leak it publicly unless paid, and Coca-Cola has not said whether that scenario is in play here.

Coca-Cola says its investigation is ongoing with the help of outside cybersecurity experts. Until that wraps up, the company isn't committing to a restart date, and consumers who rely on Fairlife's Core Power shakes or ultra-filtered milk products should expect the possibility of thinner shelves at U.S. grocery stores in the near term.