Fairlife ransomware attack recovery

The Coca-Cola Company's dairy subsidiary The Coca-Cola Company — Fairlife was hit by a ransomware attack in July 2026, attributed to the Anubis ransomware group. The attack forced a temporary suspension of production at The Coca-Cola Company — Fairlife's four U.S. facilities. Anubis claimed to have encrypted servers and stolen up to 1TB of data, threatening to leak it if demands were not met. The Coca-Cola Company worked with external cybersecurity experts and restored most production by July 28. The company stated that retail availability was largely unaffected due to existing inventory and that the incident would not have a material financial impact. The Coca-Cola Company — Fairlife's Canadian operations were not impacted. Anubis is a ransomware-as-a-service group that emerged in late 2024, using affiliates to gain access via stolen credentials or vulnerabilities like CitrixBleed2.