A data breach affecting Hallmark Cards, Inc. & Hallmark Plus was reported in March 2026 by the ransomware group Shinyhunters. The group claims to have compromised over 7.9 million Salesforce records containing personally identifiable information (PII) and internal corporate data.
At this time, specific details about the types of PII, such as whether Social Security numbers, medical data, or financial data were involved, are not publicly available. The breach was reported on a ransomware tracker, and an extortion deadline was issued by the threat actors. The full extent of the impact and the number of individuals affected remain unclear, as official notifications from Hallmark have not yet been released.
As of now, there is no information available regarding specific states affected, regulatory filings, or any potential litigation. Details surrounding this incident may emerge as official statements and notifications are issued.