Coca-Cola said Fairlife had resumed most production at four United States plants after unauthorized third-party access to some systems halted domestic output, while existing inventory kept products available at retailers and the company continued restoring affected operations. [1]

That is a restart, not a full recovery: Reuters did not establish normal plant-by-plant volume, a completed restoration date, validated data loss, the number or identity of affected people, notices, ransom payment, regulatory action, or the final cost. [1]

The hacking group Anubis claimed it stole one terabyte of data, but an attacker's assertion is not a forensic finding, and Coca-Cola's view that the incident was unlikely to materially affect its finances is a corporate assessment rather than a measured final result. [1]

Ransomware coverage naturally gravitates toward the theft claim, while the more prosaic operating receipt is that stocked coolers bridged an interruption and most production restarted; neither fact proves every line, server, account, or data set returned to normal.

With no authorized X post recovered for this story, the useful distinction is between availability sustained by inventory and availability sustained by restored output, a denominator Coca-Cola had not disclosed by the cutoff, including a reliable measure of how much stock remained on hand.

-- DAVID CHEN, Beijing