Open report — full analysis, no account required.
Sign up to generate reports and read filings that aren't on the open list.
Get notified when KO files again. Create a free account and we'll email you the moment its next filing is analyzed.
Get filing alertsCritical incident detected
Cybersecurity incident
Time-sensitive event — see the red-flag panel below for the source-quoted detail.
Red Flags Detected
- Ransomware Attack On Production Systems (new) — Unauthorized third-party access to production-related systems at a wholly-owned subsidiary represents a cybersecurity breach with operational consequences.
- U.s. Production Suspension With Undetermined Duration (new) — Complete halt of U.S. production operations at fairlife with no disclosed timeline for resumption creates revenue and supply chain uncertainty.
Coca-Cola subsidiary fairlife suspends U.S. production after ransomware attack
Filed July 16, 2026 · Period ending July 16, 2026 · ~1 min read
Key Changes
-
high
fairlife, Coca-Cola's wholly-owned dairy subsidiary, suffered a ransomware attack with unauthorized access to production-related systems; all U.S. production operations temporarily suspended.
Item 8.01 verify on EDGAR → -
medium
Product quality and safety remain unaffected; Canadian operations continue normally; incident response protocols activated and law enforcement notified.
Item 8.01 verify on EDGAR → -
high
Full scope and financial impact unknown; Coca-Cola has not yet determined whether the incident will materially affect the Company.
Item 8.01 verify on EDGAR →
Summary
Coca-Cola disclosed that fairlife, its wholly-owned dairy subsidiary, experienced a ransomware attack involving unauthorized access to production-related systems. All U.S. production operations at fairlife are temporarily suspended as a result, though product quality and safety remain unaffected and Canadian operations continue normally.
The Company has activated incident response protocols, engaged outside cybersecurity experts, and notified law enforcement. The disclosure raises three immediate concerns for investors. First, the ransomware attack represents a material cybersecurity breach at a subsidiary with production-system access.
Second, the complete suspension of U.S. production operations creates revenue and supply chain uncertainty, with no disclosed timeline for resumption. Third, Coca-Cola explicitly states it has not yet determined whether the incident will materially affect the Company, signaling that the full scope and financial impact remain unknown. The investigation is ongoing, and investors should watch for updates on production resumption timing, revenue impact quantification, and any material assessment determination.
Section-by-Section Diff
Event · Item 8.01 — Other Events
Item 8.01 — Other Events filed; see Key Changes for terms.
Added in current filing · verify on EDGAR →
fairlife, LLC (“fairlife”), a dairy company owned by the Company, identified unauthorized access by a third party to a portion of its systems, including its production-related systems, in connection with a ransomware event.
Coca-Cola disclosed that its wholly-owned dairy subsidiary fairlife experienced a ransomware attack involving unauthorized third-party access to production-related systems. The Company has activated incident response protocols, engaged outside cybersecurity experts, and notified law enforcement. The investigation is ongoing.
Added in current filing · verify on EDGAR →
Product quality and safety have not been impacted. However, as a result of the incident, production operations at fairlife in the United States are temporarily suspended. fairlife’s Canada production operations are not currently impacted.
All fairlife production operations in the United States are temporarily suspended due to the ransomware incident, though product quality and safety remain unaffected. Canadian operations continue normally. The duration of the suspension and revenue impact are not disclosed.
Thanks — your feedback helps us improve report quality.
Figures/quotes linked to EDGAR · Narrative written by AI · Jul 18, 2026 · How we verify