Kodak Data Breach Linked to ShinyHunters Extortion Claim

Kodak has confirmed that it experienced a cybersecurity incident after the ShinyHunters extortion group claimed responsibility for stealing company data. The announcement follows reports that the threat actor attempted to pressure the company by publishing details of the alleged breach.

The incident adds Kodak to a growing list of organizations targeted by cybercriminal groups that focus on data theft and extortion. Rather than deploying ransomware, many modern attackers steal sensitive information and threaten to release it publicly if their demands are not met.

Kodak has launched an investigation into the incident and continues to assess the scope of the compromise.

ShinyHunters Claims Responsibility

The ShinyHunters group listed Kodak on its leak site and claimed to possess company data obtained during the attack. The threat actor is well known within the cybersecurity community and has previously been linked to breaches affecting major organizations around the world.

According to the group’s claims, the stolen information includes internal corporate data. However, the full contents of the alleged dataset have not been publicly verified.

Cybercriminal groups often use leak sites to increase pressure on victims. By publicly naming organizations, attackers attempt to force negotiations and encourage ransom payments. The tactic has become increasingly common as companies improve their ability to recover from traditional ransomware attacks.

Investigation Remains Ongoing

Kodak acknowledged unauthorized access to parts of its network and confirmed that it is working with external cybersecurity specialists to investigate the incident. The company has not disclosed exactly how the attackers gained access or how long they remained inside affected systems.

At this stage, officials continue to determine what information may have been accessed or removed. The investigation will also examine whether customer, employee, or business partner information was affected.

Organizations typically face several challenges during incidents of this type. Security teams must identify the attack path, assess the impact, and determine what data was exposed. At the same time, they must work to contain the threat and prevent additional unauthorized access.

Data Theft Extortion Continues to Grow

The Kodak data breach reflects a broader trend across the threat landscape. Many cybercriminal groups now focus on data theft instead of encryption-based ransomware attacks. Stolen information can be used as leverage even when victims successfully protect their systems from operational disruption.

This strategy allows attackers to profit through extortion while avoiding some of the challenges associated with deploying ransomware. Sensitive corporate documents, financial information, contracts, and personal records can all become valuable bargaining tools.

Security researchers have observed a steady increase in these attacks over the past several years. Organizations across manufacturing, healthcare, retail, and technology sectors have all faced similar threats.

The approach also creates long-term risks. Even if negotiations fail, stolen information may still appear on criminal marketplaces or public leak sites.

Conclusion

The Kodak data breach highlights the continuing rise of data theft and extortion campaigns. The company has confirmed unauthorized access following claims by the ShinyHunters group, though the full scope of the incident remains under investigation. As attackers increasingly rely on stolen data rather than ransomware, organizations face growing pressure to strengthen detection capabilities, secure sensitive information, and prepare for extortion attempts that can continue long after an intrusion ends.