Coca-Cola Beverages Northeast

The challenge: Scaling protection to millions of emails

With more than 3,500 employees and over a million emails flowing each month, CCBN relies heavily on email to drive sales, coordinate distribution, and collaborate with partners and suppliers. Email’s importance makes it a prime entry point for phishing, impersonation, and vendor-based fraud attacks that traditional tools aren’t designed to catch, which created significant risk while overwhelming the lean security team with alerts to investigate.

Why Darktrace

CCBN selected Darktrace / EMAIL to add a layer of AI-driven defense that could identify subtle anomalies, stop threats that bypass traditional filters, and respond autonomously at scale at machine speed.

1. Self-Learning AI catches what other tools miss

Darktrace models “normal” communication patterns for CCBN and individual users, leveraging that information to detect anomalous activity. This capability is especially valuable against sophisticated threats like partner payment scams, people and culture scams, and vendor invoicing scams where static rules and reputation-based controls may not be enough.

“What may be normal activity for one user may be anomalous for another. Darktrace recognizes that distinction, even when the user doesn’t, and takes action,” explains Eric Bixby, Director of Infrastructure and Security at CCBN.

2. Adding protection without introducing friction

Instead of relying solely on blanket blocking, CCBN uses Darktrace to apply proportional controls based on risk, including holding suspicious messages, locking links, and applying clear warnings when needed to enable greater protection without disrupting business operations.

“Users don’t have to change how they work. No matter what someone’s role is, Darktrace helps minimize disruption and keep business moving,” says Bixby.

‍

‍

‍