Ransomware Attack hit Coca-Cola’s Middle East Operations

October 7, 2025

INCIDENT

After an alleged ransomware attack, hackers have publicly released Coca-Cola’s internal data. Coca-Cola’s name showed up on a dark web leak site run by the Everest ransomware gang on May 22nd. The hackers claimed they’d swiped personal data from 959 employees, most tied to Coca-Cola’s Middle East distributor. Everest gave the company five days to contact them and make a deal before they dumped the data. The cartel posted a link on May 27th to a full stolen dataset online. Cybernews researchers investigated the leak and found 1,104 files, including passport scans, visa copies, and IDs, most linked to the U.S. multinational beverage company's Middle East operations, particularly its Dubai office.

Incident Date

May 22, 2025

Estimated Cost


No cost values disclosed.

Victims

Type of Malware

No Malware identified