F500 Consumer Goods & Food · Beverages · Regulatory action + Data breach
Coca-Cola
Headline
Coca-Cola disclosed a confirmed breach in July 2026 - very recent, with scope still developing as of this pass, so no figures are asserted here.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
Coca-Cola disclosed a confirmed breach in July 2026 - very recent, with scope still developing as of this pass, so no figures are asserted here. Coca-Cola runs one of the largest consumer promotional data operations in the world through loyalty codes and contest entries, which is where whatever consumer data it holds originates. Recommend a follow-up on state attorney general notification filings, which is typically where scope becomes public first.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
CONFIRMED VERY RECENT BREACH (July 2026): Coca-Cola disclosed (8-K, July 16, 2026) a RANSOMWARE attack affecting its DAIRY BEVERAGE SUBSIDIARY, Fairlife, that temporarily suspended Fairlife's U.S. production; the filing does not say whether customer data was taken (which Coca-Cola owns and operates) — specific scope/data types not fully detailed in sources reviewed this pass, though the disclosure itself confirms the parent company's exposure through a wholly-owned subsidiary brand many consumers may not realize is part of Coca-Cola's corporate family.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy coca-colacompany.com/privacy-policy | Not fetched yet | NO (HTML only) |
| Terms of service coca-colacompany.com/terms-of-use | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.