Coca-Cola halts Fairlife production as ransomware incident disrupts operations, company says

Coca-Cola said it has suspended production tied to its Fairlife business after a ransomware attack, according to a report carried by Yahoo Finance and attributed to comments by the company.

In the statement, Coca-Cola said the “full scope, nature and impacts of the incident are not yet known,” indicating that the company is still working to determine how widely systems were affected and what operational consequences may follow.

Ransomware incidents typically involve attackers locking or disrupting access to computer systems and demanding payment, and they can spill into day-to-day manufacturing through interruptions in planning, inventory tracking, and other industrial workflows. In this case, Coca-Cola’s response indicates that the company chose to pause Fairlife production while it evaluates the incident.

The report did not provide a timeline for how long the suspension could last or whether it would be limited to specific facilities or lines. Coca-Cola also did not disclose, in the cited account, whether the incident affected orders, customer deliveries, or other logistics tied to the brand.

Fairlife is known in the U.S. market for packaged dairy beverages, and production interruptions can create a downstream effect for retailers and distributors that rely on steady supply. Even when physical plants remain capable of producing, the loss of operational visibility and scheduling systems can force companies to pause or operate at reduced capacity.

For Coca-Cola, which sells a broad mix of beverages, a targeted production suspension is not unusual during technology disruptions, but the commercial effect can still be material depending on how concentrated output is and how quickly IT recovery progresses. The statement emphasizing that impacts are not yet known also suggests the company is prioritizing containment and assessment before giving additional detail.

A key uncertainty remains what proportion of the affected operations is tied directly to the ransomware-impacted systems. Companies often separate the incident’s IT footprint from physical equipment readiness, but the report did not specify what systems were affected or what steps were being taken to restore operations.

Over the coming days, markets may look for follow-up disclosures from Coca-Cola regarding when Fairlife production resumes, whether normal distribution can continue without interruption, and whether the company expects any quantified financial or volume impact. Any further communication could also clarify whether the company believes it will contain the incident without broader disruption across its wider manufacturing network.