Coca-Cola said fairlife has suspended its United States operations after the dairy brand was hit by a ransomware attack and a third party gained unauthorized entry to part of its systems on July 16, 2026. The company said some of the affected systems were tied to production.
The shutdown matters now because fairlife is a major piece of Coca-Cola’s dairy business, and the disruption landed as the company moved quickly to contain it. Coca-Cola said it has brought in external cybersecurity experts and has already notified authorities, while production in Canada remains operational.
Even so, the company’s message left a sharp gap between risk and reassurance: it said product quality and safety are not impacted, despite the fact that production-related systems were involved and U.S. operations were suspended. That combination points to a defensive move aimed at limiting exposure while investigators sort out what was touched and how far the intrusion reached.
What Coca-Cola has not yet pinned down is the full scope, nature and impact of the incident, or whether it is reasonably likely to materially affect the company. fairlife posted $4 billion in sales in 2024, underscoring why any extended disruption would be watched closely, but the immediate question is simpler: how long the U.S. suspension lasts, and whether the investigation finds anything beyond the systems already acknowledged.
