Fairlife has temporarily suspended all production operations in the United States after a ransomware attack reached part of the dairy company’s computer environment, including systems connected to manufacturing.
The shutdown affects a major producer of ultra-filtered milk and protein drinks, including Fairlife milk, Core Power and Fairlife Nutrition Plan. Coca-Cola says product quality and safety were not compromised, making this a production disruption—not a food recall.
What happened to Fairlife?
The Coca-Cola Company disclosed the incident on July 16, 2026, after Fairlife detected unauthorized access to a portion of its systems. The Atlanta-based beverage company described it as a ransomware event involving production-related networks.
Fairlife activated its incident-response and business-continuity procedures. Outside advisers and cybersecurity specialists are assisting with the investigation, and law-enforcement agencies have been notified.
Coca-Cola’s official Fairlife technology-disruption announcement says teams are investigating the attack, securing affected networks and working to restore production safely.
Is Fairlife milk being recalled?
No Fairlife recall has been announced in connection with the attack. Coca-Cola specifically said the quality and safety of Fairlife products were not affected.
A manufacturing suspension does not automatically mean milk or protein shakes are contaminated. Companies may stop operations when systems controlling equipment, production schedules, quality records or product tracking cannot be used confidently.
Products already in stores have not been declared unsafe because of this incident. Consumers do not need to discard them solely due to the cyberattack, but should continue following use-by dates, refrigeration directions and package instructions.
Which products could face disruption?
Fairlife has not issued a list of recalled or withdrawn products because the incident concerns production rather than food safety. Its U.S. portfolio includes:
- Fairlife ultra-filtered milk
- Core Power and Core Power Elite protein shakes
- Fairlife Nutrition Plan shakes
- Other lactose-free dairy beverages
Retailers can continue selling unaffected inventory already delivered to stores and warehouses. No permanent product discontinuations or nationwide retail withdrawals have been announced.
Could there be a Fairlife shortage?
No nationwide shortage has been confirmed. The risk depends on how long U.S. production remains suspended, how much finished inventory is available and whether distribution systems continue operating.
A brief interruption could be covered by warehouse stock. A prolonged shutdown could reduce deliveries and create uneven availability, particularly for popular Core Power and Nutrition Plan products.
Fairlife has not announced purchase limits, and shoppers do not need to stockpile. An out-of-stock notice at one retailer would not necessarily mean a national shortage exists.
Which Fairlife operations are affected?
Coca-Cola said Fairlife’s U.S. production operations were temporarily suspended but did not provide a plant-by-plant breakdown.
Fairlife has manufacturing operations in Coopersville, Michigan, and Goodyear, Arizona. Coca-Cola has also been developing a large facility in Webster, New York. The initial disclosure did not identify which location or system was first compromised.
Fairlife’s Canadian production remains unaffected. However, Coca-Cola has not said whether Canadian output can be redirected to support U.S. supplies. Capacity, packaging and distribution requirements may differ between the two markets.
When will production restart?
No restart date has been provided. Fairlife must determine how far the attackers reached, remove unauthorized access and confirm that affected production networks can operate safely.
Industrial recovery can take longer than restoring office computers because production technology may connect with processing equipment, inventory controls, safety checks and traceability records.
The earlier Stryker cyberattack and global systems disruption demonstrated how companies may isolate technology across multiple locations while specialists investigate an intrusion.
