Kodak confirms data breach by ShinyHunters

The Eastman Kodak Company confirmed to BleepingComputer that it is investigating a security breach after the ShinyHunters extortion group claimed responsibility for the incident. Kodak is the latest organization to land on the group's leak site. ShinyHunters claims it stole more than 2.2 million records containing customer PII and other internal corporate data. The group threatened to publish the data unless the company responded by June 18. Kodak confirmed a data breach while stating that the incident was limited in scope, contained and did not pose a threat to its systems or operations. Kodak told SecurityWeek that an unauthorized third party gained access to a limited amount of company data and that the incident appears to have been contained. The company brought in external cybersecurity experts and notified law enforcement. Kodak believes there is no threat to its systems or operations. It is not yet known how the attackers gained entry to Kodak's systems. ShinyHunters claims it stole customer information and internal corporate data but has not publicly provided proof of the claims.