Back to overview
Confidence MediumJun 15, 2026kodak.com

Kodak Confirms Data Breach After ShinyHunters Ransomware Claim

PatternExternal actor · Malware · Confidentiality impact

Eastman Kodak confirmed that an unauthorized third party accessed a limited amount of company data. This confirmation followed the ShinyHunters ransomware group listing Kodak on their leak site on June 15, 2026, and threatening to publish over 2.2 million records of customer personally identifiable information and internal corporate files.

Signal date
Jun 15, 2026
Updated
Jun 29, 2026
Confidence
Medium
Sources
12 sources

Signal context

First seen: Jun 15, 2026

Last updated: Jun 29, 2026

Status: Public signal

Key points

  • Kodak confirmed a data breach on June 15, 2026, after the ShinyHunters ransomware group claimed responsibility.
  • The breach involved unauthorized access to a limited amount of company data.
  • ShinyHunters threatened to publish over 2.2 million records, including customer PII and internal corporate files.

Signal analysis

Beta

It helps compare this signal with other published signals without treating the labels as final determinations.

Affected organization
Kodak logo
Kodak

Likely country: 🇺🇸 United States

inferred from source domains

    Threat source
    Malware, Error activity

    The feed marks multiple actor roles. Treat this as a review signal rather than a final attribution.

    • Source type: outside the affected organization
    • Source type: supplier or third-party involvement
    Business impact
    Potential operational disruption

    Impact area: Confidentiality, Availability

    Likely asset: User or customer data

    Trend context
    32 signals with similar action pattern
    • 1 signal in the same sector
    • 100 signals with the same likely impact area
    • 1 signal linked to this organization/domain
    Mentioned entities
    KodakData DisclosureShinyHunters Ransomware Claim Eastman KodakShinyHuntersKodakPII and

    External sources

    Related signals

    Grouped by why the signal is relevant.

    viennaairport.com logoViennaairportJun 23, 2026
    Same action patternSame impact area

    Vienna Airport Targeted in APT73/Bashe Ransomware Attack

    The ransomware group APT73/Bashe claimed responsibility for a cyberattack against Vienna Airport (Flughafen Wien AG) on June 23, 2026, threatening to leak sensitive data. The airport acknowledged a limited leakage of old cargo-related files from one email inbox but denied a broader system compromise.

    mckaysugar.com.au logoMckaysugarJun 21, 2026
    Same action patternSame impact area

    McKay Sugar Cyber Incident by Gentlemen Ransomware Group

    McKay Sugar, a major Australian sugar producer, suffered a cyber incident that disrupted operations at its Farley and Racecourse Mills. The Gentlemen ransomware group claimed responsibility for the attack around June 15-16, 2026, on their leak site. Public reporting indicated that McKay Sugar was working to verify what data was stolen or accessed. The ransomware group claimed to have stolen over 26 million records containing PII of customers and other internal data. The incident was discussed in public reporting around June 21, 2026.

    comta.com.tw logoComtaJun 19, 2026
    Same action patternSame impact area

    Como Furniture Enterprises Data Breach by LockBit

    Como Furniture Enterprises, a mold design and manufacturing company based in Taiwan, was reported to have suffered a data breach discovered on June 19, 2026, with the LockBit ransomware group identified as the threat actor. The group has threatened to leak sensitive data unless their demands are met.

    atlas-elektronik.com logoAtlas ElektronikJun 25, 2026
    Same action patternSame impact area

    ATLAS ELEKTRONIK GmbH Hit by TheGentlemen Ransomware Attack

    On June 25, 2026, the ransomware group 'TheGentlemen' claimed responsibility for a cyberattack on ATLAS ELEKTRONIK GmbH, a German defense technology company specializing in maritime electronics and naval systems. The group issued an ultimatum, threatening to leak sensitive company data unless negotiations commence. The attack was reported on June 25, 2026, and is being monitored by cybersecurity intelligence platforms.

    nidec.com logoNidecJun 22, 2026
    Same action patternSame impact area

    Nidec Chaun Choung Technology Hit by Blackfield Ransomware Attack

    Nidec Chaun Choung Technology, a Taiwanese subsidiary of Nidec Corporation, confirmed on June 22, 2026, that it was compromised by a ransomware attack. The Blackfield ransomware gang claimed responsibility and demanded a $2 million ransom, with a 'possibility of information leak' being investigated. Emergency measures were taken to shut down affected servers and networks.

    mackaysugar.com.au logoMackaysugarJun 15, 2026
    Same action patternSame impact area

    Mackay Sugar hit by The Gentlemen ransomware, operations disrupted

    Australia's second-largest sugar producer, Mackay Sugar, was targeted in a ransomware attack by The Gentlemen group, disrupting operations at its mills. The ransomware group claimed responsibility and listed Mackay Sugar on its dark web leak site on June 15, 2026.