Fairlife hit by ransomware: Anubis threatens to leak 1 TB of data

Coca-Cola said on July 16, 2026, that Fairlife had been hit by a ransomware attack. Now the Anubis ransomware gang says it was behind it and is threatening to publish about 1 TB of what it claims is stolen internal data.

The company disclosed the incident on July 16, 2026, after Fairlife temporarily halted all U.S. manufacturing operations. Its Canadian operations kept running.

Coca-Cola said the attack disrupted U.S. operations, but product quality and safety were not affected. For anyone buying from a consumer food brand, that distinction matters. This is a cyber incident, not a contamination problem.

Anubis has added Fairlife to its leak site and says it used a double-extortion playbook: first disrupt the victim’s systems, then force the issue by threatening to dump confidential data online.

Researchers say the Anubis gang has been active since December 2024. The group has also been linked to a destructive “wiper mode” that can permanently erase files. Anubis also claimed it encrypted Fairlife’s Nutanix infrastructure, though that part hasn’t been independently verified.

If you buy Fairlife products in the U.S., this is something to keep an eye on, because a long stretch of downtime can still mean spot shortages or delayed shipments.

The biggest effect should be on U.S. production and distribution, not in Canada.