If it isn't bad enough that consumers have to be concerned about getting explosive diarrhea from eating contaminated produce, we also have to worry about disruptions to our food supply from a different kind of parasite: cybercriminals. Last week, Coca-Cola filed a notice with the SEC indicating that its Fairlife dairy subsidiary was the victim of a ransomware attack that resulted in suspension of Fairlife's entire US production (Canadian production is unaffected).

Coca-Cola said this was an external attack that resulted in unauthorized access to computer infrastructure including its production systems, which is why operations have been shut down. Today a ransomware operator known as Anubis has claimed responsibility for the attack and is threatening to publish a terabyte of stolen data if its ransom demands are not met. The amount of the demand has not been released.

It's unclear how long the production pause will continue. Fairlife inhabits a unique niche in the dairy sector with its ultrafiltered, enhanced-protein products. Like most large food companies, its operations rely on a carefully choreographed ballet of just-in-time supply, production, and distribution. Without any direct competitors to fill the gap, consumers could soon see empty shelves. A prolonged shutdown could have ripple effects in the industry because dairy farms will be looking to sell or otherwise dispose of product that normally would go to Fairlife. This could also result in tons of milk being wasted because there is nowhere to store or process it.

This breach isn't an isolated incident. Recent attacks have targeted companies like JBS, Dole, and Campbell's Soup. Cybercriminals have increasingly targeted food companies, going beyond traditional hacks of corporate databases into attacks on the operational systems of a company. Attacking production puts instant pressure on companies to pay up, because every day a plant is shut down can cost millions of dollars.

The incident highlights how vulnerable the food supply is to disruptions. Large companies with deep pockets become targets of sophisticated cybercriminal gangs. Consolidated production facilities that rely on complex computer systems make it difficult for producers to be nimble. The growing ability of AI agents to exploit vulnerabilities, as evidenced by the OpenAI model that went rogue and hacked a start-up during a security test, mean that it will become easier for to attack systems and companies must therefore direct more resources to cybersecurity. Enhanced security is not free, and ultimately consumers will be paying the price.