Kodak Confirms Data Breach Following ShinyHunters Claims

Key Takeaways Breach Confirmed: Kodak confirmed an unauthorized third party gained temporary access to a limited amount of company data. Records Claimed: ShinyHunters claims it stole over 2.2 million records, including customer PII and internal corporate data. Leak Deadline: The extortion group set a leak deadline of June 18, 2026, pressuring Kodak to respond. Kodak has confirmed that it is working with external cybersecurity experts to investigate a data breach after attackers gained access to some of the company's data. The ShinyHunters extortion group has claimed responsibility for the incident on its dark web leak site.

What Kodak Confirmed New York-based company Kodak said an unauthorized third party illegally gained temporary access to a “limited amount” of company data, according to reports.

" Kodak recently discovered that an unauthorized third party illegally gained temporary access to a limited amount of company data ,” a company spokesperson told BleepingComputer.

ShinyHunters claims Kodak breach | Source: HackManac on X While Kodak has not attributed the breach, ShinyHunters claimed it stole over 2.2 million records containing customer personally identifiable information (PII) and other internal corporate data. The group issued a final warning, demanding Kodak make contact by June 18, 2026, before it leaks the exfiltrated data.

Response and Pattern of High-Volume Attacks The company stated it promptly engaged external cybersecurity experts to investigate what data was accessed and copied. Kodak added that it is working with law enforcement and is confident there is no threat to its systems or operations, noting it will share additional updates as appropriate.

ShinyHunters has been tied to a series of large-scale data-theft campaigns. Starting last year, the group claimed attacks against hundreds of Salesforce customers through Salesforce and Salesloft Drift operations.

In November 2025, Salesforce data was stolen via third-party provider Gainsight. The breach was then claimed by ShinyHunters, which announced “almost 1,000” victims.

Recently, the threat actor also claimed exploiting a zero-day flaw in Oracle PeopleSoft enterprise software vulnerability tracked as CVE-2026-35273 , allegedly breaching the Council of Europe in this way.

Kodak Confirms Data Breach Following ShinyHunters Claims of 2.2 Million Records Theft

What Kodak Confirmed

Response and Pattern of High-Volume Attacks