Kodak Confirms Data Breach, ShinyHunters Claims Responsibility for 2.2 Million Records
Imaging and materials giant **Kodak** has confirmed it is investigating a security breach after an unauthorized third party accessed a limited amount of company data. The notorious **ShinyHunters** extortion group has claimed responsibility, alleging the theft of over 2.2 million records, including customer Personally Identifiable Information (PII) and internal corporate data.

**Kodak**, founded in 1880 as the **Eastman Kodak Company**, is working with external cybersecurity experts to investigate a recent security incident. The company, known for its extensive portfolio of commercial print, advanced materials, and chemical products, stated that attackers gained temporary access to a "limited amount" of company data.
### Kodak's Official Statement
A company spokesperson confirmed the breach, noting that an investigation is underway. "**Kodak** recently discovered that an unauthorized third party illegally gained temporary access to a limited amount of company data. We promptly engaged external cybersecurity experts to support an investigation of what data was accessed and copied," **Kodak** stated.
The company is also collaborating with law enforcement, expressing confidence that there is "no threat to our systems or operations." Further updates are expected as the investigation progresses.
### ShinyHunters Claims Massive Data Theft
While **Kodak** has not yet attributed the attack, the **ShinyHunters** extortion group has publicly claimed responsibility on their dark web leak site. The cybercrime gang asserts that they exfiltrated over 2.2 million records.

These records reportedly contain sensitive customer PII and other internal corporate data. **ShinyHunters** has issued a threat to leak the stolen data by Thursday, June 18, 2026, if their demands are not met, stating, "This is a final warning to reach out by 18 June 2026 before we leak along with several annoying (digital) problems that'll come your way."
### A Pattern of High-Profile Attacks
**ShinyHunters** has a history of high-profile data theft campaigns. The group has previously claimed attacks against hundreds of **Salesforce** customers, alleging the theft of over 1.5 billion records through **Salesforce Aura** and **Salesloft Drift** campaigns.
More recently, the extortion group was linked to security breaches affecting over a dozen **Snowflake** customers and various other third-party integration providers. Just last week, **ShinyHunters** also claimed responsibility for exploiting a zero-day flaw in **Oracle**'s **PeopleSoft** enterprise business software suite, leading to data theft from over 100 organizations, including the **University of Nottingham**.
The method of initial access in the **Kodak** breach remains undisclosed by the company. However, the consistent targeting of enterprise platforms and third-party integrators by **ShinyHunters** highlights the persistent and evolving threat landscape facing organizations today.