Kodak confirms a major data breach following ShinyHunters hacking claim

American imaging technology company Kodak said it is investigating a cybersecurity incident after the notorious ransomware group ShinyHunters claimed to have infiltrated the company’s internal network and exfiltrated sensitive confidential data.

 

Headquartered in Rochester, New York, Kodak is an American imaging technology company known for pioneering modern photography and becoming one of the world’s most iconic camera and film brands. Today, it focuses on commercial printing, advanced materials, chemicals, and digital imaging solutions for a range of industries.

 

Earlier this month, the ShinyHunters extortion group added Kodak as a victim on its dark web site. The group claimed that it had stolen more than 2.2 million customer and corporate data records from the company. The ransomware group warned that the data would be made public unless the company complied with its ransom demands within two days.

 

x.com/DarkWebInformer/status/2066542066839007670

 

“This is a final warning to reach out by 18 June 2026 before we leak along with several annoying (digital) problems that’ll come your way,” the group said. 

 

The group claimed to have exfiltrated more than 2.2 million data records, including customer’s personally identifiable information (PII) and other internal corporate data. However, it did not share any sample files or other evidence to support its claim.

 

Kodak did not publicly acknowledge any breach of its internal network, but recently shared a statement with BleepingComputer, where a company spokesperson said that attackers only accessed a “limited amount” of data in the incident.

 

“Kodak recently discovered that an unauthorised third party illegally gained temporary access to a limited amount of company data. We promptly engaged external cybersecurity experts to support an investigation of what data was accessed and copied.

 

“We are working with law enforcement and are confident there is no threat to our systems or operations. We will share additional updates as appropriate,” the company added.