Hallmark suffered a breach in March 2026 after attackers accessed data stored in Salesforce, exposing approximately 1.7 million customer records.
What happened
According to HIBP, Hallmark experienced a data breach in March 2026 when attackers gained unauthorized access to data stored within Salesforce. The attackers subsequently attempted extortion, and the data was published after the extortion deadline passed.
What was exposed
The breach exposed approximately 1.7 million unique email addresses across Hallmark and the Hallmark+ streaming service. Also compromised were customer names, phone numbers, physical addresses, and support tickets.
Who is affected
Approximately 1.7 million individuals with accounts on Hallmark or Hallmark+ streaming service are affected by this breach.
What to do now
Affected customers should monitor their accounts for suspicious activity and consider changing their passwords. Given the exposure of physical addresses and phone numbers, individuals should also be alert to potential phishing or social engineering attempts.