Breach taxonomy
Summary
Coca-Cola announced that its dairy subsidiary fairlife, LLC identified unauthorized third-party access to a portion of its systems, including production-related systems, in connection with a ransomware event. US production operations at fairlife were temporarily suspended; Canada operations were not impacted and product quality/safety were unaffected. Filed under Item 8.01; materiality not yet determined as of filing date.
Tagging rationale
ThreatUnknown
Filing describes 'unauthorized access by a third party... in connection with a ransomware event' without attributing the actor -> UNKNOWN.
MethodsRansomware
Filing explicitly describes the intrusion as occurring 'in connection with a ransomware event' -> RANSOMWARE; no data exfiltration confirmed.
AssetsRevenue ProcessProduct Service
Production-related systems were accessed and 'production operations at fairlife in the United States are temporarily suspended' -> REVENUE-PROCESS + PRODUCT-SERVICE.
EffectsBiz Interruption
US fairlife production operations were temporarily suspended -> BIZ-INTERRUPTION; no ransom demand or data exposure disclosed.
Business continuityPartial
Company 'promptly activated its incident response and business continuity protocols' but US production remained suspended as of the filing while Canada operations continued -> Partial.
Impact
Ransomware suspended all US production at a significant subsidiary with full scope not yet known -> score 3.
InsuranceNot disclosed
Filing makes no mention of insurance -> null.
Read the original SEC filing excerpt
Item 8.01. Other Events. On July 16, 2026, The Coca-Cola Company (the "Company") announced that fairlife, LLC ("fairlife"), a dairy company owned by the Company, identified unauthorized access by a third party to a portion of its systems, including its production-related systems, in connection with a ransomware event. After detecting the issue, the Company promptly activated its incident response and business continuity protocols. The Company's investigation and assessment of the impact of the incident is ongoing, with the assistance of outside advisors and cybersecurity experts. The Company has also notified law enforcement. Product quality and safety have not been impacted. However, as a result of the incident, production operations at fairlife in the United States are temporarily suspended. fairlife's Canada production operations are not currently impacted. The Company is working diligently to complete the investigation and restore the systems and impacted operations. The full scope, nature and impacts of the incident are not yet known. Accordingly, the Company has not yet determined whether the incident is reasonably likely to have a material impact.