Kodak.com listed on ShinyHunters leak site

• Ransomware group: ShinyHunters
• Country: United States
• Sector: Manufacturing
• Announcement date: June 15, 2026

ShinyHunters claims data breach at kodak.com

The threat actor group known as ShinyHunters has listed kodak.com on its leak site, claiming a significant data breach involving the organization. According to the announcement made on June 15, 2026, the group alleges that they have successfully compromised a vast amount of sensitive information belonging to the company.

The threat actor has provided a deadline of June 18, 2026, for the organization to establish contact regarding the incident. While the group has made these claims publicly on their platform, information regarding the specific identity and background of the ShinyHunters group remains limited. As is common with many ransomware-related leak sites, the group uses these platforms to pressure organizations by threatening to release stolen data if demands are not met.

Details of the alleged compromise

The claims made by ShinyHunters suggest a massive exfiltration of information. The group alleges that the breach involves over 2.2 million customer personally identifiable information (PII) records. In addition to these customer records, the group claims to have obtained various corporate data belonging to the organization.

Despite the scale of the alleged theft, the group has not provided any screenshots to verify the contents of the stolen data. Furthermore, specific details regarding the total size of the data or the exact file count have not been disclosed by the attackers. The announcement is categorized as a data leak notification, and the group has not specified a ransom demand in their public listing.

Affected data types

• Customer PII
• Corporate data

About Eastman Kodak Company

Eastman Kodak Company is a well-established American technology company operating globally in the fields of photography, commercial printing, and imaging technologies. The company produces photographic films, digital printing solutions, and industrial imaging products.

Potential impact and industry implications

The alleged compromise of customer data may increase the risk of identity theft or targeted phishing attacks against the affected individuals. When personal information is leaked, malicious actors often use it to craft highly convincing fraudulent communications to deceive victims. Furthermore, the publication of the claimed data could negatively impact the organization's commercial reputation.

Given that the organization is located in the United States, state-level data protection regulations and potential legal consequences may be applicable following such an event. There also exists the possibility of secondary attacks on the organization's digital infrastructure through double-extortion tactics. Double extortion is a common ransomware strategy where attackers not only encrypt an organization's systems but also steal sensitive data, threatening to leak it to damage the company's reputation and force payment.

For organizations operating in the manufacturing and technology sectors, maintaining robust cybersecurity postures is critical. This typically involves implementing multi-factor authentication, maintaining regular offline backups, and conducting frequent vulnerability assessments to defend against the evolving tactics used by threat actors like ShinyHunters. Continuous monitoring of network traffic and employee training on phishing awareness are also standard defensive measures to mitigate the risk of initial access and data exfiltration.