Breaches · 54 days ago
The pressure is no longer just leaked files. Anubis is pairing data theft with a mode that can permanently erase files and backups, so the normal recovery path may disappear even if the victim refuses to pay.
The group says it locked Fairlife systems, took 1 TB of confidential data, and gave Coca-Cola a week to pay before it leaks the data. Coca-Cola said production at Fairlife was paused while the impact was assessed, which shows the business hit is already operational, not just reputational.
That changes the victim’s clock. If backups can be destroyed as part of the attack, the ransom is no longer only about privacy or embarrassment; it becomes a fight to preserve any clean restore path at all.
2 sources covering this story
Threat group claims credit for ransomware attack on Coca-Cola’s dairy unit
The attackers previously exploited vulnerabilities or used stolen credentials for initial access.
Ransomware Group Threatening to Leak Data Stolen From Coca-Cola’s Fairlife
The Anubis ransomware group claims to have stolen 1 TB of confidential data from the Coca-Cola subsidiary.
Part of the PlainSec briefing for 2026-07-23