Contained High impact Ransomware Checked 15h ago

Ransomware halts Coca-Cola's Fairlife dairy production

A ransomware attack on Coca-Colas Fairlife dairy subsidiary shut down US production in early July 2026. Anubis claimed the attack and said it stole about 1 terabyte of data, which it later leaked. Fairlife restored most production, and by August 21 it had reopened its Webster, New York plant with a ribbon-cutting, though production there had not yet reached full capacity. Coca-Cola has not announced that recovery or the investigation is complete. A class action lawsuit has been filed over the breach.

Started
Jul 3, 2026
Latest activity
Aug 26, 2026
Attributed to
AnubisConfirmed
Where
United States
Sectors
Manufacturing, Consumers
Scale
one Coca-Cola dairy subsidiary, production plants across the US

Current status

No credible update was found after August 26, 2026; the latest known report said system restoration and the forensic investigation were still ongoing.

Contained: The attack has been stopped or blocked. Recovery and investigation are still running.

Who is behind it

The Anubis ransomware group claimed credit on its leak site and later published stolen data; Coca-Cola confirmed the ransomware event and the resulting data breach in SEC filings.

Impact

Ransomware forced Fairlife to suspend milk production across the US for about two weeks, and attackers stole roughly 1 terabyte of company data that was later leaked after Coca-Cola declined to pay.

What to do

Anyone who receives a breach notification from Fairlife or Coca-Cola should watch for phishing attempts using the stolen data.

Timeline

  1. Aug 26, 2026

    INCIBE-CERT said system restoration and the forensic investigation were still ongoing after most production resumed.

    Containedincibe.es
  2. Aug 21, 2026

    Fairlife held a ribbon-cutting ceremony for its new $650 million Webster, New York plant with Gov. Kathy Hochul, but Food Processing reported production there had not yet reached 100 percent capacity.

    Containedfoodprocessing.com
  3. Aug 20, 2026

    Fairlife said production was scaling up at its Webster, New York plant, but it did not confirm full restoration of all systems or closure of the ransomware investigation.

    Containedrochesterbiz.com
  4. Aug 4, 2026

    A class action lawsuit was filed against Coca-Cola and Fairlife over the data breach.

    Containedyahoo.com
  5. Jul 30, 2026

    Coca-Cola said Fairlife had restored the majority of its production capacity following the attack.

    Containedfinance.yahoo.com
  6. Jul 28, 2026

    Anubis published the stolen Fairlife data after Coca-Cola declined to pay the ransom.

    Containedtechtimes.com
  7. Jul 27, 2026

    Coca-Cola confirmed a data breach at Fairlife tied to the ransomware attack as Anubis continued to threaten a leak.

    Activesecurityweek.com
  8. Jul 22, 2026

    The Anubis ransomware group said it had stolen about 1 terabyte of confidential data from Fairlife and threatened to leak it.

    Activesecurityweek.com
  9. Jul 16, 2026

    Coca-Cola filed a Form 8-K with the SEC confirming unauthorized access to Fairlife production systems tied to a ransomware event.

    Activecybersecuritynews.com
  10. Jul 3, 2026

    Coca-Cola disclosed that a ransomware attack on Fairlife had suspended US dairy production and the Anubis gang claimed responsibility.

    Activebleepingcomputer.com

Sources

Related reports