Business Context and Reporting Period
This Form 8-K is filed by The Coca-Cola Company (KO) on July 16, 2026, reporting a cybersecurity incident involving its subsidiary, fairlife, LLC. The report details an unauthorized third-party access event classified as ransomware affecting fairlife's production-related systems.
Key Financial Metrics
The filing does not provide specific financial metrics such as revenue, profit, cash flow, margins, debt, or liquidity figures. The document focuses exclusively on the operational impact of the cybersecurity event.
Material Changes and Operational Impact
- Incident Type: Ransomware event involving unauthorized access to fairlife systems.
- Operational Status: Production operations at fairlife in the United States are temporarily suspended.
- Geographic Scope: fairlife's Canada production operations are not currently impacted.
- Product Safety: Product quality and safety have not been impacted.
- Response Actions: The Company has activated incident response and business continuity protocols, engaged outside cybersecurity experts, and notified law enforcement.
Outlook, Risks, and Management Commentary
Management states that the investigation and assessment of the incident's impact are ongoing. The full scope, nature, and impacts of the incident are not yet known. Consequently, the Company has not yet determined whether the incident is reasonably likely to materially affect the Company. The filing explicitly notes that the information is not deemed "filed" for purposes of Section 18 of the Securities Exchange Act of 1934.
Investor Verification Checklist
- Monitor for updates on the duration of the U.S. production suspension at fairlife.
- Verify if the Company later determines the incident to be material to its financial results.
- Track the status of system restoration and the conclusion of the cybersecurity investigation.
- Assess potential supply chain disruptions for fairlife products in the U.S. market.