Coca-Cola disclosed to the SEC that a ransomware attack had forced it to halt production at its Fairlife dairy plants. A company spokesperson said, "Our Fairlife manufacturing facilities nationwide are currently shut down." Fairlife ranks among Coca-Cola's key brands, boasting roughly $4 billion in annual sales as of 2024.
Coca-Cola did not say when Fairlife's systems would be restored.
Cyber extortion targeting food and drink firms often leads to prolonged consequences. For example, cyberattacks on Arizona Beverages in 2019 and UNFI last year caused weeks of production halts and empty store shelves. The company has not provided a timeline for system restoration.
Get the market news that matters in a five-minute read with Market Briefs, our free daily newsletter
Coca-Cola has not disclosed whether it has been in contact with the attackers or if a ransom was demanded. The company's cybersecurity team is working to restore systems. In similar past incidents, recovery often took weeks, leaving retailers to scramble for alternative supplies.
The cessation of Fairlife's U.S. operations has effectively halted its entire domestic supply chain. The brand's products, including ultrafiltered milk and protein shakes, are sold in major grocery chains nationwide. With no clear restart date, retailers may face shortages in the coming weeks.
Coca-Cola has not indicated whether it maintains backup systems or offline data copies that could speed recovery. In similar incidents, companies often restore operations incrementally, but full normalization can take weeks.
The production halt also places additional strain on Coca-Cola's relationships with retailers who have come to rely on Fairlife's steady supply. With no clear restart date, grocers may need to seek alternative suppliers, potentially costing the brand valuable shelf space and consumer loyalty. Fairlife's rapid growth in the dairy alternative sector has made it a critical component of Coca-Cola's portfolio, and any prolonged downtime could erode its market position.
Such cyber incidents highlight the increasing vulnerability of critical food and beverage infrastructure. Food and beverage companies have become attractive targets because their reliance on just-in-time inventory and digital logistics makes them particularly sensitive to downtime. As cybercriminals continue to refine their tactics, firms like Coca-Cola face mounting pressure to invest in robust cybersecurity measures and offline backups to protect critical production systems.
Fairlife has become a significant growth driver for Coca-Cola since its acquisition. Initially launched as a premium ultrafiltered milk, it expanded into protein shakes, creamers, and other dairy-based beverages, capturing health‑conscious consumers and establishing a strong foothold in the dairy alternative market. The brand's rapid expansion into a wide product lineup has made it a key revenue stream, meaning any production disruption risks losing both sales and shelf space to competitors like Chobani, Danone, or Nestlé.
Join Market Briefs, our free daily newsletter, for a quick daily rundown of the markets
