Coca-Cola pauses Fairlife milk production in the U.S. after cyberattack, company says

Coca-Cola has temporarily halted production of Fairlife milk in the United States after a cyberattack, according to a report citing company statements. The pause is intended to prevent further disruption while the company investigates the incident and works through its response steps.

The company did not lay out the specific systems targeted, how long production could be affected, or whether any customer or consumer data was exposed in the publicly reported remarks. Instead, the focus remains on restoring operations in a controlled way and determining the impact of the attack.

Fairlife milk production is part of Coca-Cola’s broader consumer goods footprint, which includes packaged beverages as well as other food and dairy offerings. For companies like Coca-Cola, manufacturing interruptions can ripple quickly through distribution schedules, warehouse inventory, and retailer replenishment cycles.

While the reported disruption is currently limited to Fairlife milk production in the U.S., the incident highlights a recurring vulnerability in food and beverage supply chains: production lines often rely on connected technology for planning, scheduling, quality control, and automation. When those systems are disrupted, companies may choose to stop production rather than risk inconsistent output or safety compliance issues.

The report also indicates that an investigation is underway. That typically involves determining the entry point of the attack, confirming whether malware or data theft occurred, and validating that systems are secure before resuming operations. In many such incidents, organizations move gradually, bringing production lines back only after internal and, in some cases, third-party assessments.

Coca-Cola’s immediate communications, as reported, do not specify any timeline for a return to full production. That uncertainty can be commercially significant, even for temporary halts, because dairy and other refrigerated products depend on predictable processing and cold-chain logistics.

In the near term, investors and consumers may watch for updates on the scope of the incident, whether the company expands the pause beyond the U.S., and how quickly it can clear distribution backlogs. Retailers may also look for indicates on whether shortages are confined to specific regions or product varieties.

One caveat: the report does not provide detailed technical findings, such as the type of cyberattack, the affected IT or operational-technology systems, or whether regulators were notified. Until those details are disclosed, it is not possible to assess the likelihood of broader operational impacts or lasting effects on costs.