2023 Pepsi Bottling Ventures — infostealer malware; ~28k workforce/contractor notifications
Data compromised
SSN, driver license, financial and benefits metadata per notification summaries in security press
Technical writeup
Pepsi Bottling Ventures LLC, a major North American Pepsi-Cola bottler within the PepsiCo ecosystem, told regulators unauthorized actors planted information-stealing malware across late 2022 into January 2023, exfiltrating HR-class PII for roughly twenty-eight thousand current and former employees and contractors. Trade and vendor reporting distinguished bottling-venture systems from broader PepsiCo corporate infrastructure wording in public statements.
Root cause
Malware deployment and credential/data theft on bottler IT (per incident summaries)