Coco-Cola's Fairlife cyber attack explained: Impact, response, what's next

Coca-Cola Co. is racing to contain the fallout from a cyberattack that has forced its Fairlife dairy subsidiary to suspend production operations across the United States.

The cyberattack occurred on Thursday, July 16, when an unauthorised third party gained access to a portion of Fairlife’s system, including production-related infrastructure.

The attack has been identified as a ransomware event, a type of malicious software that restricts access to computer files and systems while demanding payment for their return.

The company’s security system was detected by the company’s security system, initiating immediate activation of incident response and business continuity protocols.

Impact of cyber attack

Production in Fairlife factories across the United States has been temporarily suspended. Factories operating in Canada have not been affected by the attack, according to the company.

Coca-Cola has yet to confirm if the incident will result in product shortages at stores. The company has not revealed how long the suspension is going to last.

Nevertheless, Coca-Cola has expressed its assurances in terms of product safety and quality. Products available in the market are still safe for consumers to use.

It is unknown whether customer, employee, or vendor information has been breached. Neither the ransom demands nor the value have been stated by the company.

How is Coca-Cola responding?

External consultants and cybersecurity experts have been brought in by the company to determine the extent of the problem.

It has contacted federal authorities; however, no individual or group has claimed responsibility for this breach.

Coca-Cola utilized their existing contingency plans in order to avoid interruptions in service while the production systems were unavailable.

Coca-Cola was open about the breach but at the same time avoided making speculations on the issue, saying: “The full scope, nature and impacts of the incident are not yet known.”

What’s next?

The restoration timeline has not been determined yet. The company stated that it has been “working diligently to complete the investigation and restore the systems and impacted operations.”

If production took more than a few days, consumers may start noticing reduced availability of Fairlife products, including ultra-filtered milk, core powder protein shakes, and nutrition plan drinks.

This is just one such example of a rising trend of cyber attacks on food and beverage manufacturing firms. Some of the largest firms operating in this domain, including JBS, Dole, and Campbell’s Soup, have already fallen prey to ransomware.

In fact, the White House recently stated that it was planning to set up a coordination committee comprising AI developers and critical infrastructure providers, and this might become a necessity sooner rather than later.