The Coca-Cola Company has confirmed that hackers stole data from Fairlife, its dairy subsidiary, during a ransomware attack this month. The breach marks another significant incident targeting a major food and beverage producer.
Coca-Cola disclosed the data theft following the ransomware incident at Fairlife, which produces popular milk and protein drink products. The company has not disclosed the specific volume of data compromised or the types of information accessed by the attackers.
Ransomware attacks against large corporations typically target sensitive business data, customer information, or operational records. Attackers often demand payment in exchange for data deletion and decryption keys.
Fairlife, acquired by Coca-Cola in 2012, operates multiple production facilities across North America. The subsidiary generates significant revenue through retail distribution of dairy-based beverages.
Coca-Cola stated it is investigating the incident and has engaged cybersecurity experts and law enforcement. The company has not confirmed whether it received a ransom demand or whether negotiations with attackers are underway.
The attack underscores ongoing cybersecurity challenges in the food and beverage sector, where operational disruptions and data breaches pose both financial and reputational risks.
A threat actor compromised BdThemes' infrastructure and modified a remote JSON feed to create unauthorized admin accounts on affected WordPress sites. The attack leveraged the company's premium web-design plugin distribution system.
HackerOne, the bug bounty platform, has come under criticism following recent policy shifts and operational decisions that have impacted its security researcher community.
Simply deleting files from old USB drives before disposal provides minimal data protection. Experts warn that deleted data can be recovered with basic tools, making proper wiping essential.
CISA has confirmed that ransomware groups are actively exploiting two recently patched vulnerabilities in SonicWall SMA1000 devices, including a critical server-side request forgery flaw.