A ransomware claim against Hallmark Cards, Inc. and Hallmark Plus in the United States reports that over 7.9 million Salesforce records containing PII and other internal corporate data have been compromised by the threat actor shinyhunters. The attackers issued a final warning to reach out by 2 Apr 2026 before they leak the data and cause a range of digital problems, with an update dated 31 Mar 2026 #UnitedStates
Incident Details
- Victim: Hallmark Cards, Inc. & Hallmark Plus
- Sector: Consumer Services
- Country: US
- Actor: shinyhunters
- Source:
- Discovered: 2026-03-31 02:16:16.310125
- Published: 2026-03-31 02:16:13.219868
Information
- Actor: shinyhunters
- Over 7.9M Salesforce records containing PII and other internal corporate data have been compromised
- Final warning to reach out by 2 Apr 2026 before the data is leaked and additional digital disruptions occur
- Make the right decision — don’t be the next headline
- Updated: 31 Mar 2026
- Warning: FINAL WARNING
Disclaimer: This post is based on public claims made by the ransomware group "shinyhunters". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.