Bleepingcomputer Kodak Confirms Data Breach Linked to ShinyHunters Gang
Article Content
- •Kodak confirmed a data breach involving over 2.2 million records stolen by ShinyHunters.
- •The breach includes customer PII and internal corporate data, with a deadline for Kodak to respond.
- •Kodak is collaborating with cybersecurity experts and law enforcement to investigate the incident.
Kodak has confirmed a data breach after the ShinyHunters extortion group claimed responsibility for stealing over 2.2 million records, including customer personally identifiable information (PII) and internal corporate data. The company stated that an unauthorized third party gained temporary access to a limited amount of data. Kodak is currently working with external cybersecurity experts and law enforcement to investigate the breach. ShinyHunters threatened to leak the stolen data unless Kodak contacted them by June 18, 2026. The method of access has not been disclosed, but the group has a history of exploiting vulnerabilities in various organizations. This incident follows a series of breaches attributed to ShinyHunters, including attacks on Salesforce customers. Kodak has reassured that there is no ongoing threat to its systems or operations.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track Charter Communications and CVE-2026-35273 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
SSRF to RCE Vulnerability in Oracle PeopleSoft Exploited by ShinyHunters On September 25, 2026, Mandiant reported ongoing mass exploitation of CVE-2026-35273 by the ShinyHunters group, a vulnerability in Oracle PeopleSoft. The vulnerability, first reported by TrendAI's Zero Day Initiative on June 10, 2026, allows attackers to leverage a Server-Side Request Forgery (SSRF) to achieve remote…
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access…