Eastman Kodak confirms data breach claimed by ShinyHunters

On 17 June 2026, Eastman Kodak — the 130-year-old Rochester, New York imaging company now focused on commercial print, advanced materials, and chemicals — confirmed a cybersecurity incident after the prolific extortion gang ShinyHunters listed it on the group's dark-web leak site and threatened to publish data it claimed to have stolen.

What happened

ShinyHunters listed Kodak around 15 June 2026, claiming to hold more than 2.2 million records containing customer personally identifiable information (PII) along with internal corporate data, and set a deadline of 18 June 2026 for the company to respond before leaking the material. The 2.2-million figure is the attacker's own claim and has not been independently verified by Kodak or by security researchers.

In a statement, Kodak said an unauthorised third party illegally gained temporary access to a limited amount of company data. The company said it promptly engaged external cybersecurity experts to support an investigation, is working with law enforcement, and is confident there is no threat to its systems or operations. Kodak did not confirm the scope or record count asserted by the attackers.

Why it matters

ShinyHunters has emerged as one of the most active extortion crews of 2025–2026, running a high-volume cadence of "name-and-shame" listings against well-known brands and pressuring victims with public leak deadlines rather than file-encrypting ransomware. The Kodak listing fits that pattern: a recognisable corporate name, an unverified seven-figure record claim, and a short countdown designed to force a quick payment. For Kodak, the immediate exposure is reputational and — if customer PII is genuinely in the stolen set — a potential notification and regulatory burden, even though the company says its operational systems were not affected.