What is the official website of Hallmark Cards ?

The official website of Hallmark Cards is https://careers.hallmark.com/.

What is Hallmark Cards's cybersecurity risk score?

Hallmark Cards has an AI-generated cybersecurity risk score of 526 out of 1000, indicating a Critical security posture according to Rankiteo's assessment.

How many security incidents has Hallmark Cards experienced?

According to Rankiteo, Hallmark Cards currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Hallmark Cards been affected by any supply chain cyber incidents ?

According to Rankiteo, Hallmark Cards has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Carnival Corporation (Incident ID: INDPITCARBASZARHAL1777466463) Salesforce (Incident ID: SALHAL1775967850)

Does Hallmark Cards have SOC 2 Type 1 certification ?

According to Rankiteo, Hallmark Cards is not certified under SOC 2 Type 1.

Does Hallmark Cards have SOC 2 Type 2 certification ?

According to Rankiteo, Hallmark Cards does not hold a SOC 2 Type 2 certification.

Does Hallmark Cards comply with GDPR ?

According to Rankiteo, Hallmark Cards is not listed as GDPR compliant.

Does Hallmark Cards have PCI DSS certification ?

According to Rankiteo, Hallmark Cards does not currently maintain PCI DSS compliance.

Does Hallmark Cards comply with HIPAA ?

According to Rankiteo, Hallmark Cards is not compliant with HIPAA regulations.

Does Hallmark Cards have ISO 27001 certification ?

According to Rankiteo,Hallmark Cards is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Hallmark Cards operate in ?

Hallmark Cards operates primarily in the Retail industry.

How many employees does Hallmark Cards have ?

Hallmark Cards employs approximately 17,415 people worldwide.

Does Hallmark Cards own any subsidiaries ?

Hallmark Cards presently has no subsidiaries across any sectors.

How many LinkedIn followers does Hallmark Cards have ?

Hallmark Cards's official LinkedIn profile has approximately 113,131 followers.

What is the NAICS classification code for Hallmark Cards ?

Hallmark Cards is classified under the NAICS code 43, which corresponds to Retail Trade.

Does Hallmark Cards have a Crunchbase profile ?

No, Hallmark Cards does not have a profile on Crunchbase.

Does Hallmark Cards have a LinkedIn profile ?

Yes, Hallmark Cards maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hallmark-cards.

How many cybersecurity incidents has Hallmark Cards experienced ?

As of August 3, 2026, Rankiteo reports that Hallmark Cards has experienced 3 cybersecurity incidents.

How many peer or competitor companies does Hallmark Cards have ?

Hallmark Cards has an estimated 15,939 peer or competitor companies worldwide.

What types of cybersecurity incidents has Hallmark Cards faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Hallmark Cards

Boost Score +25 with badge (5 left)

526

/1000

Critical

551

/1000

Very Poor

Hallmark Cards Vendor Cyber Rating & Cyber Score

hallmark.com

Add Your Compliance Badge

Hallmark believes if you care enough you can change the world as we work to help create a more emotionally connected world in every life, every day. Founded in 1910 by a teenage entrepreneur with two shoe boxes of postcards under his arm, Hallmark today is still family owned and privately held. Headquartered in Kansas City, Missouri, and employing tens of thousands worldwide, the company operates a diversified portfolio of businesses. The Hallmark business designs and sells greeting cards, gifts, ornaments and gift packaging in more than 25 languages with distribution in over 70 countries and 100,000 rooftops worldwide, including a network of independently-owned Hallmark Gold Crown stores in two countries. Hallmark Media is

Hallmark Cards A.I CyberSecurity Scoring

Scoring History

Hallmark Cards

Hallmark Cards CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Hallmark Cards

Breach

4/2026

Carnival Corpor...

INDPITCARBASZAR...

Hallmark Cards

Breach

3/2026

Salesforce

SALHAL177596785...

Hallmark Cards

Breach

3/2026

MCGSUBAMTADTHAL...

Loading…

A.I.

Hallmark Cards Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Hallmark Cards

Incidents vs Retail Industry Avg (This Year)

Hallmark Cards has 58.73% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Hallmark Cards has 191.26% more incidents than the average of all companies with at least one recorded incident.

Incident Types Hallmark Cards vs Retail Industry Avg (This Year)

Hallmark Cards reported 3 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 3 data breaches, compared to industry peers with at least 1 incident.

Incident History - Hallmark Cards (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Hallmark Cards Subsidiaries

Hallmark Cards

Retail

Website: https://careers.hallmark.com/

Company Size: 10,001+ employees

CrayolaManufacturing

Hallmark MediaEntertainment Providers

DaySpring CardsManufacturing

Hallmark CanadaManufacturing

Hallmark Business ConnectionsAdvertising Services

Loading…

Hallmark Cards Similar Companies

Five Below

fivebelow.com

At Five Below our growth is a result of the people who embrace our purpose: We know life is way better when you are free to Let Go & Have Fun in an amazing experience, filled with unlimited possibilities, priced so low, you can always say yes to the newest, coolest stuff! Just ask any of our over 27,000 associates who work at Five Below and they’ll tell you there’s no other place like it. It all starts with our purpose and then, The Five Below Way, which is our values and behaviors that each and every associate believes in. So if your heart is beating a little quicker and your smile is getting bigger now that you know what we’re all about, let’s just say your search for a one-of-a-kind experience that’s much more than a j-o-b just might be officially ending HERE. It’s all about culture at Five Below, making this a place that can inspire you as much as you inspire us with big ideas, super energy, passion, and the ability to make the workplace a WOWplace!

Post Office Ltd

postoffice.co.uk

We’ve come a long way since it all started over 380 years ago. We’ve built up a network of 11,500 branches across the country. To give you a sense of how big that is, we’ve got more branches than the four biggest banks in the UK put together. Or put simply, we’re the largest retail network in the UK. So we’re there for our customers, wherever they are. But our biggest branch by far is our website, which gets nearly 1 million visitors a week, so we’re building on our digital strategy too. As you can imagine, a business this big has lots of opportunities in lots of different areas. So we’re always looking out for enthusiastic, ambitious and customer-focused people to join us. And we’re striving to become “simpler to run, better for customers and a great place to work”, so innovation is really important. We’re confident the changes we make will be for the best, benefiting both our people and our customers. Social Media Policy: https://bit.ly/3gwSgEl

Ross Stores, Inc.

rossstores.com

For the last 40+ years, Ross Stores, Inc. has grown from a six-store chain into an $21.1 billion, Fortune 500 Company. We operate our off-price businesses in a way that keeps costs low so we can pass the savings to our customers. We continue to open new stores and our sales growth has outpaced traditional retailers for the past three years. Ross Dress for Less® has 1,847 stores in 44 states, the District of Columbia and Guam. dd’s DISCOUNTS® has 358 stores in 22 states. Please join our Talent Community to receive the latest updates for your areas of interest, career news, and exciting opportunities at Ross Stores: https://ross.avature.net/talentcommunity Additional information is available at: www.rossstores.com www.ddsdiscounts.com

Tupperware

tupperware.com

Founded in 1946, Tupperware's signature container created the modern food storage category that revolutionized the way the world stores, serves and prepares food. Today, we continue to innovate for the benefit of people and our planet by designing innovative, functional and environmentally responsible products that people love and trust. With a purpose to nurture a better future, Tupperware products are alternatives to single-use items - meant to reduce food waste and single-use plastic waste. We distribute our products into nearly 80 countries primarily through independent representatives around the world.

Zalando

zalando.com

Welcome to Zalando. Here’s some key info about us: Our position and vision: - We’re Europe’s leading online platform for fashion and lifestyle. - Founded in Berlin in 2008, we bring head-to-toe fashion to more than 50 million active customers in 25 markets; offering clothes, footwear, accessories, and beauty. - We're building the ecosystem for fashion and lifestyle ecommerce. Our offering: - Our assortment of international brands ranges from world-famous names to local labels - Our platform is a one-stop fashion destination for inspiration, innovation, and interaction - As Europe’s most fashionable tech company, we work hard to find digital solutions for every aspect of the fashion journey: for our customers, partners, and friends of our brand. - Our logistics network with 12 centrally located fulfillment centers allows us to efficiently serve our customers throughout Europe, supported by warehouses in Italy, France, Poland, and Sweden with a focus on local customer needs. Our beliefs: - Our ambition is to combine our passion for self-expression through fashion with our unwavering commitments to sustainability and D&I - We promote an inclusive corporate culture that welcomes different perspectives and brings together people from diverse backgrounds. We want to ensure a non-discriminatory and supportive working environment for each of our employees to thrive. It’s a journey that all teams are on together, centered around the values we uphold. - We believe that our integration of fashion, operations, and online technology gives us the capability to deliver a compelling value proposition to both our customers and fashion brand partners.

Conad

cb conad.it

PERSONE OLTRE LE COSE. Conad è una storia fatta di imprenditori, commercianti, clienti e comunità. Un lungo viaggio che inizia nella metà degli anni ’60: nel 1962 nasce a Bologna il Consorzio Nazionale Dettaglianti, una società cooperativa a responsabilità limitata costituita da 14 gruppi d’acquisto e 420 soci dettaglianti. Conad rappresenta un’azienda che ha sempre promosso l’associazionismo, modello che ancora oggi è il tratto distintivo nel panorama della grande distribuzione. Il nostro successo è anche quello raggiunto grazie imprenditori che hanno scelto liberamente di mettersi assieme nella consapevolezza del ruolo centrale della persona, delle sue ambizioni e dell’importanza di valorizzarne le potenzialità. La nostra offerta nasce dal nostro costante ascolto della comunità con la quale, attraverso la nostra prossimità al territorio, dialoghiamo ogni giorno per conoscerne le esigenze e i bisogni. 6 cooperative, 2.300 soci e i 3.174 punti vendita: questa è Conad oggi. Un’azienda che da sempre mette in primo piano le persone, oltre le cose.

Titan Company Limited

titancompany.in

Titan Company Ltd is the organization that brought about a paradigm shift in the Indian watch market when it introduced its futuristic quartz technology, complemented by international styling. With India's two most recognized and loved brands Titan and Tanishq to its credit, Titan Company Ltd is the fifth largest integrated own brand watch manufacturer in the world. The success story began in 1984 with a joint venture between the Tata Group and the Tamil Nadu Industrial Development Corporation. Presenting Titan quartz watches that sported an international look, Titan Company Ltd transformed the Indian watch market. After Sonata, a value brand of functionally styled watches at affordable prices, Titan Company Ltd reached out to the youth segment with Fastrack, its third brand, trendy and chic. The company has sold 150 million watches world over and manufactures over 15 million watches every year. Backed by over 6,000 employees, two exclusive design studios for watches and jewellery, 10 manufacturing units, and innumerable admirers’ world over, Titan Company Ltd continues to grow and set new standards for innovation and quality. The organization is all geared to repeat the Titan and Tanishq success story with each new offering. https://www.facebook.com/CareersAtTitan/

Walmart Canada

walmart.ca

Walmart Canada operates a chain of more than 400 stores nationwide serving 1.5 million customers each day. Walmart Canada's flagship online store, Walmart.ca is visited by more than 1.5 million customers daily. With more than 100,000 associates, Walmart Canada is one of Canada's largest employers and is ranked one of the country's top 10 most influential brands. Walmart Canada's extensive philanthropy program is focused on supporting Canadian families in need, and since 1994 Walmart Canada has raised and donated more than $750 million to Canadian charities. Additional information can be found at walmartcanada.ca and on Walmart Canada’s social media pages – Facebook, X, Instagram and LinkedIn.

Nordstrom

nordstrom.com

At Nordstrom, we empower our employees to set their sights high and blaze their own trails. This is a place where your success and growth are truly a result of your own efforts and achievements. Our teams are made up of motivated people who work hard to become leaders within the company, at all levels of the organization. These well-traveled paths show how hard work, loyalty, a competitive spirit and your unwavering commitment to the customer can take you and your career to new places. In addition to being a great place to have a career, we’re also committed to respecting the environment and supporting our communities. To learn more, check out NordstromCares.com. Interested in joining the Nordstrom team? See some of our current opportunities under our Careers tab or visit careers.nordstrom.com to apply today.

Loading…

NEWS

Hallmark Cards CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 09, 2026 08:00 AM

City says water bill customers’ card info not compromised after cybersecurity attack

Online credit and debit card payments for the City of San Angelo's water bills have been unavailable since Friday, Feb.

Read Article

January 13, 2026 08:00 AM

Cyber Resilience: The New Hallmark Of Effective Leadership In The AI Age?

By Remi Ramcharan, Vice President, Senkron Digital. “Should we use AI for this?”, “AI can fix that, right?”, “We'll get AI to figure this...

Read Article

November 02, 2025 07:00 AM

AI Meets Holidays: Helpful Tools, Best Deals and Security Tips

As we enter the holiday shopping season, more people are using AI tools and tips to shop for deals and protect themselves online.

Read Article

April 30, 2025 07:00 AM

'Everyone is vulnerable': Cybersecurity 'hygiene' tips for World Password Day

Cybercriminals are getting more nefarious as technology continually evolves, costing Canadians hundreds of millions of dollars every year.

Read Article

March 06, 2025 08:00 AM

Erase your voicemail greeting now, top cybersecurity CEOs warn

The latest cybersecurity threat uses your voicemail greeting to create an AI voice clone for social engineering attacks.

Read Article

December 19, 2023 08:00 AM

Year of Dragon greeting card unveiled by Presidential Office

A dragon year themed greeting card to be sent by President Tsai Ing-wen and Vice President Lai Ching-te for the Year of the Dragon was...

Read Article

November 01, 2023 07:00 AM

Are your company’s cybersecurity trainings a waste of your time?

A lot of generic courses are outdated, experts say. Better solutions can cost tens of thousands of dollars, but some of the best advice is...

Read Article

June 07, 2022 07:00 AM

Malware on Card Readers Expose Dangers with Bring Your Own Device (BYOD) Policies

Malware on low-cost CAC readers sold online expose the dangers of allowing federal employees or contractors to use their own devices.

Read Article

December 13, 2021 08:00 AM

ENISA: The cornerstone of the EU’s cybersecurity strategy

The Cybersecurity Agency has been tasked with building a common defence, without any faults, against cyberattacks in the EU.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18577

SUMMARY

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-10848

SUMMARY

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1, outlen - 1) and then scanned the result with strchr(out_buf, '"'). Because strncpy does not NUL-terminate the destination when the source is at least outlen - 1 (127) bytes long, the subsequent strchr reads past the 128-byte destination buffer into adjacent stack memory; if a " byte is found beyond the buffer, a one-byte out-of-bounds NUL write also occurs. A related defect in extract_payload() runs strchr/strrchr over the receive buffer, which may not be NUL-terminated when a maximal-length frame fills it. The parsed bytes come directly from the OCPP central-system server over a websocket: the reader thread fills recv_buf via websocket_recv_msg() and calls parse_rpc_msg() on each inbound DATA frame (subsys/net/lib/ocpp/ocpp.c). A malicious or compromised central server, or an on-path attacker (OCPP is commonly deployed over plain ws://), can send an RPC frame whose uid or action field is 127+ bytes with no closing quote, triggering the out-of-bounds access. The primary impact is a remotely triggerable denial of service: the unbounded scan can fault on an unmapped page, and the stray NUL write can corrupt adjacent stack state. The over-read data is not reflected to the peer, so disclosure is limited. The feature is EXPERIMENTAL and must be explicitly enabled (CONFIG_OCPP). The fix replaces the manual parser with the bounds-respecting json_mixed_arr_parse() and copies the extracted uid with an explicitly NUL-terminated buffer, eliminating both over-reads.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7)

cvss3

Base Score: 7.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

2.2

REFERENCES

CVE-2026-9856

SUMMARY

A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used directly as filenames without proper validation. An attacker can exploit this by publishing a malicious Hugging Face Hub repository with a crafted `tokenizer_config.json` file. When a victim downloads and saves the tokenizer or processor, the attacker-controlled keys can escape the intended save directory, enabling arbitrary file writes with attacker-controlled content. This vulnerability affects multiple processors inheriting from `ProcessorMixin`, including Idefics, Florence, Gemma, Phi, and Qwen-VL.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-65321

SUMMARY

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-10774

SUMMARY

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by default), but subnet_keys_destroy() guarded the matching psa_destroy_key() with CONFIG_BT_MESH_V1d1. That Kconfig symbol was removed when explicit Mesh 1.0.1 support was dropped, so the destroy branch became permanently dead code and the import is never balanced by a destroy. The imbalanced teardown is reached every time subnet keys are destroyed: deleting a subnet (Config Server NetKey Delete), completing a Key Refresh Procedure (which retires the old key set), and resetting/re-provisioning the node. The over-the-air triggers are processed only under the node's device key, so they are exercisable by the provisioner or network administrator that owns the node, reachable over the Bluetooth Mesh network. With the default CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT of 16, repeated add/delete or key-refresh cycles exhaust the shared PSA key-slot pool after roughly a dozen rounds. Once exhausted, bt_mesh_private_beacon_key() and thus subnet creation fail: the node can no longer add subnets or complete key refresh, and other PSA crypto consumers on the device may be starved, until the device is rebooted. The fix aligns the destroy guard with the import guard (CONFIG_BT_MESH_PRIV_BEACONS) so each slot is freed.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 2.4)

cvss3

Base Score: 2.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

0.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…