fairlife, LLC Data Breach Investigation

Data Breach Blog

Data Breach

fairlife, LLC Data Breach Investigation

Almeida Law Group Calendar Icon

Date of data breach:

October 19, 2026

by: Almeida Law Group

Almeida Law Group is investigating a data breach at fairlife, LLC. If you were affected, contact Almeida Law Group.

About fairlife, LLC

fairlife, LLC is a Chicago-based dairy company that produces ultra-filtered milk, Core Power protein shakes, and fairlife nutrition plan shakes. Founded in 2012, it is a wholly owned subsidiary of The Coca-Cola Company and has surpassed $1 billion in annual retail sales. The company operates production facilities in Coopersville, MI; Fair Oaks, IN; Dexter, NM; Goodyear, AZ; and Rochester, NY, and is headquartered at 1001 West Adams Street, Chicago, Illinois.

What Happened?

fairlife, LLC was listed in a Vermont Attorney General breach report summary dated October 15th, 2026. The filing identifies a ransomware incident and reports that the following categories of personal information were involved: Social Security Numbers, Government ID Numbers, Financial Account Codes, Credit and Debit Account Info, and Health Records. The Vermont AG filing is the first regulatory disclosure to specify which data types were compromised. The total number of affected individuals was not reported in the filing.

Coca-Cola disclosed the underlying ransomware incident through an SEC Form 8-K filing on July 16th, 2026, confirming that fairlife had identified unauthorized access to a portion of its systems, including production-related systems. U.S. production was temporarily suspended, while Canadian operations were not affected. On July 27th, 2026, Coca-Cola confirmed that data had been taken and that the majority of production had resumed. The Anubis ransomware group claimed responsibility on its leak site around July 20th–21st, 2026, alleging theft of approximately 1 TB of data including HR records, engineering documentation, and production data; however, those volume and content claims come solely from the attacker and have not been independently verified. The Vermont AG notification filing in October 2026 suggests the forensic investigation concluded and individual breach notifications were sent approximately three months after the incident. A class action lawsuit was filed in August 2026 in U.S. District Court in Atlanta by lead plaintiff Christina Montalvo, a former Michigan-based fairlife employee. The complaint names both Coca-Cola and fairlife as defendants, alleging that they failed to properly maintain and implement security practices for systems containing employee data, and that personal information including names and Social Security numbers was exposed.

Key Facts at a Glance

  • Company or Organization: fairlife, LLC
  • Industry: Food and Beverage / Dairy Products Manufacturing
  • Location: Chicago, Illinois
  • Incident type: Ransomware / Unauthorized Access / Data Theft
  • Date breach discovered: October 15th, 2026
  • Date of consumer notification: October 15th, 2026
  • Litigation status: Class action filed August 2026 in U.S. District Court, Atlanta (lead plaintiff: Christina Montalvo; defendants: fairlife, LLC and The Coca-Cola Company)
  • Source: Vermont Attorney General Breach Report; BleepingComputer; SecurityWeek; WSB-TV

What Should You Do?

If you received a notification from fairlife or Coca-Cola about this breach, enroll in any identity theft protection offered before the deadline passes. Because Social Security Numbers, government ID numbers, financial account information, and health records were involved, you should place a fraud alert or credit freeze with each of the three major credit bureaus — Equifax, Experian, and TransUnion — and monitor your credit reports closely at AnnualCreditReport.com. Review your bank and credit card statements for unauthorized transactions, watch your Explanation of Benefits statements and medical records for services you did not receive, and report any suspected identity theft at IdentityTheft.gov.

Your Legal Rights

If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.

Were You a Victim of a Data Breach?

"*" indicates required fields

By clicking the SEND button and submitting this form, I consent to receive communications from Almeida Law Group LLC and their co-counsel by phone call, email, and/or SMS regarding this matter and other potential legal matters. I understand that message and data rates may apply and that consent to such contact is not required for use of these services. Message frequency varies. Reply STOP to opt-out and HELP for help. I also agree to the Privacy Policy. I understand that my information may be shared with advertising partners to deliver targeted advertisements and optimize outreach efforts. I confirm that I am at least 18 years old. I have read and understand the disclaimer above. I agree my use of this site and the information provided here is not intended to create and does not create an attorney client relationship with the Almeida Law Group and/or attorneys employed by the Firm. No attorney client relationship is intended or created unless and until an engagement agreement is signed by all relevant parties. The contents of this site constitute attorney advertising and not legal advice; therefore you should not act or rely upon any information contained herein, and should always seek the advice of an attorney.

Resourceful. Resilient. Relentless.

Contact us today to get the justice you and your family deserve.