:

KODAK CONFIRMS DATA BREACH BY SHINYHUNTERS GANG

AI DESK1 MIN READ
WED, JUN 17, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Kodak has confirmed a security breach after the ShinyHunters extortion gang gained access to company data. The imaging company is working with external cybersecurity experts to investigate the incident.

Kodak disclosed the breach following claims by ShinyHunters, a known extortion group that typically steals data and threatens to publish it unless paid. The company is conducting a full investigation into the scope and scale of the breach with help from external security specialists. ShinyHunters has previously targeted major corporations and published stolen data when ransom demands were not met. The group operates by exfiltrating sensitive information and using it as leverage for financial gain. Kodak has not yet disclosed what types of data were accessed or the number of affected individuals. The company said it is working to secure its systems and will provide updates as the investigation progresses. Kodak advised users to monitor their accounts for suspicious activity.

■ SOURCES

Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

D-Link has alerted users of a maximum-severity zero-day vulnerability (CVE-2026-86296) affecting DIR-822A dual-band Wi-Fi routers. The flaw has no available patch and public exploit code is already circulating.

1H AGOSecurity Desk

A cross-site request forgery (CSRF) vulnerability in WordPress Core, dubbed 'Click2Shell,' enables attackers to execute PHP code on vulnerable servers. Technical details and working exploits are now public.

9H AGOSecurity Desk

The ShinyHunters extortion group took control of the dark web leak site belonging to the prolific Cl0p ransomware gang over the weekend. The attackers set an eight-figure extortion demand pegged at 2.333% of Cl0p's estimated net worth.

10H AGOSecurity Desk

The FBI's CJIS Security Policy v6.1 strengthens encryption requirements and vulnerability scanning mandates. Agencies must prepare for updated password, MFA, and identity verification standards ahead of compliance audits.

12H AGOSecurity Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.