← Eastman Kodak

2026 Eastman Kodak — confirmed limited breach; ShinyHunters claims 2.2M+ records (Jun)

2026 2.2M records affected Share on X

Data compromised

Kodak confirmed temporary unauthorized access and copying of company data; ShinyHunters claims 2.2M+ customer PII and internal corporate records—categories pending forensic notice

Technical writeup

Verified company disclosure — June 17, 2026. Eastman Kodak told BleepingComputer and SecurityWeek that an unauthorized third party illegally gained temporary access to a limited amount of company data; Kodak engaged external cybersecurity experts, notified law enforcement, and stated there was no threat to its systems or operations. ShinyHunters listed Kodak on its leak site claiming more than 2.2 million customer PII and internal corporate records with a June 18, 2026 extortion deadline; Kodak had not publicly attributed the incident to the group or verified the actor's scope at initial reporting. Malwarebytes and trade press noted ShinyHunters had not published proof samples at disclosure time. BreachHistory indexes 2,200,000 records per the ShinyHunters marketing figure cited in journalism pending company or regulator victim notices—distinct from Kodak's "limited amount" characterization.

Root cause

Unauthorized third-party access to company data per Kodak disclosure; parallel ShinyHunters extortion listing

References