2025 Coca-Cola Company (Middle East affiliate scope) — Everest dark-web leak of ~959 workforce identity files
Data compromised
Government ID scans, sponsor numbers, addresses, DOBs, and occupational fields for a nine-hundred-class employee set per specialist journalism
Technical writeup
Cybernews analyzed a May 2025 Everest ransomware leak listing ostensibly tied to Coca-Cola that contained roughly 1,100 files—primarily passports, visas, and Gulf-region HR metadata for about 959 personnel described in press as linked to bottling and distribution partners in Bahrain and the UAE after an ignored ransom deadline. Coverage distinguished the haul from a contemporaneous alleged Coca-Cola Europacific Partners Salesforce resale thread.
Root cause
Criminal extortionist publication following claimed network compromise (Everest branding per dark-web marketing summarized by Cybernews)