ShinyHunters Claim Hallmark Salesforce Data and Threaten Leak
Summary
ShinyHunters claim they compromised more than 7.9 million Salesforce records tied to Hallmark Cards, Inc. and Hallmark Plus, and warn of a leak unless contacted by April 2, 2026. The claim is unconfirmed.
Key points
- The monitored claim names Hallmark Cards, Inc. and Hallmark Plus as victims and ShinyHunters as the actor.
- ShinyHunters claim more than 7.9 million Salesforce records containing PII and internal corporate data were compromised.
- The group reportedly warned Hallmark to make contact by April 2, 2026, or face a data leak and further digital disruption.
- The article says the claims are unconfirmed; it provides no independent evidence of compromise.
Article Details
- Victim
- Hallmark Cards, Inc. & Hallmark Plus
- Victim Domain
- Unknown
- Attack Date
- 2026-03-31
- Claim Date
- 2026-03-31
- Encryption Status
- Unknown
- Encrypted Size
- Unknown
- Exfiltration Status
- Claimed compromise; exfiltration is unconfirmed
- Exfiltrated Data
- The group reportedly claims that over 7.9 million Salesforce records containing PII and other internal corporate data were compromised. The source does not confirm that the data was exfiltrated.
- Exfiltrated Size
- Unknown
- Ransom Demand
- None reported
- Leak Status
- Leak threatened if the victim does not reach out by 2026-04-02; no leak is reported as of the 2026-03-31 update.