Kodak breach investigation and ShinyHunters leak threat

Kodak disclosed that an unauthorized third party temporarily accessed a limited amount of company data, and **ShinyHunters** later claimed it stole **over 2.2 million records** containing customer PII and internal corporate data. The activity moved from breach disclosure to a public leak threat when the actor said the material would be published on **18 June 2026** unless contacted before then. Available material confirms Kodak is investigating unauthorized access, but the size and contents of the claimed stolen dataset have not been independently verified. Kodak said it engaged external cybersecurity experts and law enforcement to determine what was accessed and copied. The company also said there is no threat to systems or operations, keeping confirmed fallout centered on potential confidentiality exposure rather than stated business disruption. If the claimed data categories are accurate, downstream risks include identity abuse, targeted phishing, and exposure of internal business information. Immediate priorities are to validate what data left the environment, watch for publication or resale of Kodak data, and prepare notification or containment steps if the leak claim materializes. The initial access path, the exact scope of copied data, and whether the actor holds the full claimed dataset remain unknown in available evidence.