RiskEvents
ClosedMedium impactAI Refreshed

Kodak confirms data breach claimed by ShinyHunters extortion group

Occurred 17 Jun 2026·Detected 19 Jun 2026·
🇺🇸 Kodak headquarters in Rochester, New York, United States; breach impact is corporate-wide3 reportsEnded 1 Jul 2026
CyberCyberCasualty & Liability

Eastman Kodak Company has confirmed an unauthorised third party gained temporary access to a limited amount of company data after the ShinyHunters extortion group listed the company on its dark web leak portal, claiming theft of approximately 2.2 million customer and employee records. Kodak is working with external cybersecurity experts and law enforcement; the company states there is no threat to systems or operations. ShinyHunters has threatened to publish the data on 18 June 2026.

AI-generated from linked source reports. See our correction policy.

Impact verdict

Medium impact. MEDIUM: A named NYSE-listed US corporate has confirmed a data breach claimed by a prolific extortion group, with an alleged ~2.2 million records exfiltrated. This is a plausible trigger for first-party cyber breach response (notification, credit monitoring, forensics, crisis services), third-party cyber liability (regulatory defence, fines), and potential cyber extortion coverage. The scale is meaningful at the individual insured level but not market-moving; no critical-infrastructure or systemic sector exposure has been confirmed. A social/community source alleging exploitation of a critical Oracle PeopleSoft vulnerability (CVE-2026-35273) remains unverified.

View assessment methodology

Premium discovery tier

Unlock analyst briefs, intelligence depth, and the revision timeline

Public pages show event facts and a short lead-in. Premium accounts unlock analyst briefs, deeper intelligence, loss context, and the full revision history for this event.

Start two-week trial

Geographic Zone Matches

3 active matches

  • TRIA Certified Areas
    Rule-basedConfidence 100%
  • Pacific Ring of Fire
    Rule-basedConfidence 100%
  • Caribbean Hurricane Zone
    Rule-basedConfidence 100%

Geographic zone matches are RiskEvents spatial/analytical indicators, not coverage determinations or Lloyd's official classifications.

Affected countries

🇺🇸 United States

Lloyd's classifications

Tracking this kind of risk? Get an email when Cyber events escalate.

Get alerts
← Back to live events