Anubis says it stole 1 TB of data during a ransomware attack on Coca-Cola’s Fairlife. Here’s what is confirmed and how you can avoid related phishing attempts and fake messages.
Table of Contents
What Happened?
The group listed Coca-Cola and Fairlife on its leak site on July 20, 2026. It claims it locked company servers and stole 1 TB of confidential data.
Anubis gave Coca-Cola one week to pay a ransom. The criminals threatened to publish the stolen files if the company refuses.
Coca-Cola previously confirmed that the attack disrupted Fairlife’s U.S. production. However, the company has not confirmed what information was stolen or whether personal data was involved.
Breaches like this can create problems long after company systems are restored. Stolen details may later support phishing emails, fake calls, or impersonation attempts.
Your information may also have been leaked in another breach without your knowledge. Checking for leaks can help you spot possible problems before criminals use the data.
Futureproof monitors your data for leaks 24/7 and helps you reduce scam risks with simple, clear steps.
Who Was Affected and What Data Was Leaked?
Coca-Cola has not shared how many customers, workers, or business partners may be affected. It has also not confirmed that personal information was stolen.
Anubis described the stolen material only as 1 TB of confidential data. The group did not publicly identify the exact files or information involved.
The theft claim comes from the criminals and has not been independently verified. Coca-Cola’s investigation is still ongoing.
Internal business files can contain names, emails, contracts, financial records, or login details. However, none of these categories has been confirmed here.
If personal details later appear, criminals could use them for convincing phishing emails, fake calls, or impersonation attempts.
How Hackers Disrupted Fairlife’s Systems
Coca-Cola said an unauthorized third party accessed part of Fairlife’s systems, including systems connected to production. The company has not explained exactly how the criminals got inside.
Ransomware is harmful software that locks files or systems until money is paid. Anubis claims it locked Fairlife’s servers and copied data out of the network.
This approach is called double extortion. Attackers lock systems and also threaten to publish stolen information, creating more pressure to pay.
SecurityWeek reports that Anubis also has a wiper mode that can permanently delete files. Coca-Cola has not said this feature was used at Fairlife.
At Futureproof, Kevin explains digital safety in simple words, with clear tips and zero fluff. He holds a degree in information technology and studies fraud trends to keep his tips up-to-date.
In his free time, Kevin plays with his cat, enjoys board-game nights, and hunts for New York’s best cinnamon rolls.
