Hallmark Data Breach
The 2026 Hallmark Salesforce dataset first appeared as a threat actor's claim of nearly 8 million Hallmark Cards and Hallmark Plus records. Reporting on April 1 said no sample had yet been published and Hallmark had not responded.
Exposed Data Types
5- Email addresses
- Names
- Phone numbers
- Physical addresses
- Support tickets
About This Breach
A public breach source later authenticated published data and catalogued 1,736,520 unique emails across Hallmark and the Hallmark+ streaming service, with names, phones, physical addresses, and support tickets.
Nearly 8 million is the actor's raw-record claim, while 1,736,520 is a public breach source's unique-email measure. Neither is a count of people, accounts, customers, support tickets, or a total confirmed by Hallmark. March 31 is a catalogue date tied to the listing and extortion chronology, not a proven access or exfiltration day.
No dataset or searchable person-level data has been imported locally. The “support tickets” class does not establish that a particular record concerned an order, refund, subscription, delivery, gift, streaming service, or family context. The record does not identify anyone as a Hallmark or Hallmark+ customer, subscriber, or support user.
Support text, addresses, phones, names, and service associations must remain private. Correct historical support or contact details do not authenticate a sender; unexpected Hallmark requests should be checked through a known official channel opened independently. Because password exposure is not supported, this record alone does not require a password change.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
