Kodak Admits Data Breach After ShinyHunters Hack Claims
Kodak confirms data breach after ShinyHunters claims theft of over 2.2 million customer records.
Kodak has confirmed a data breach after the cybercrime group ShinyHunters claimed to have stolen over 2.2 million customer records and corporate data. The hackers threatened to leak the data unless a ransom was paid by June 18. Kodak stated that an investigation is underway with external experts, and they are confident the incident was limited, contained, and poses no threat to their systems or operations.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Kodak?
Get an email when a new story names Kodak, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe ShinyHunters group allegedly exfiltrated over 2.2 million customer records and corporate data from Kodak, threatening to publish the data unless a ransom was paid. This incident highlights the persistent risk posed by organized cybercrime groups who target large enterprises holding significant volumes of customer data. The fact that external experts were required to assess the scope suggests internal detection and response capabilities may not have been sufficient to identify or contain the breach proactively. Organizations holding customer data at scale must treat data minimization, access controls, and rapid breach detection as core priorities — not afterthoughts — because exposed records carry both regulatory consequences and severe reputational damage.
What helps against this
How we list vendors- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Immutable backup and recovery
Ransomware cannot delete or encrypt your way back.