Coca-Cola is investigating a ransomware incident that affected its Fairlife dairy division and led to a temporary halt in production at its facilities in the United States.

In documents filed with the Securities and Exchange Commission, the company stated that it is assessing the scale of the attack and its potential impact on business operations. According to available information, the incident did not affect the quality or safety of Fairlife products, including its ultrafiltered lactose-free milk, as well as its protein and nutrition shakes.

Coca-Cola acquired the remaining 57% stake in Fairlife in 2020 after a joint venture with Select Milk Producers. In March, the company announced a $650 million investment to expand its production capacity in Coopersville, Michigan. In 2023, Fairlife revealed plans to open a 69,000-square-meter facility in Webster, New York, with operations scheduled to begin this year. Since 2022, Fairlife’s annual retail sales have exceeded $1 billion.

Fairlife’s Canadian operations, which were not affected by the attack, continue to function as usual. The company has notified law enforcement and is working with cybersecurity experts and external consultants to restore its systems.

There is currently no information about the possible perpetrators of the attack, and cybersecurity specialists have not yet identified any specific claims of responsibility for the incident.

This case is yet another cyber incident in the agricultural sector, which in recent years has increasingly become a target for such attacks. According to the Food and Agriculture Information Sharing and Analysis Center, as of 2026, the sector has experienced approximately 205 attacks, accounting for about 4.9% of all such incidents.

The agricultural sector is among the industries affected by attacks on level sensors in storage tanks, which are used by energy, chemical, and other companies to store fuel and industrial liquids.