JM Bullion Data Breach Exposes Social Security Numbers

JM Bullion Inc., an online retailer of physical precious metals based in Dallas, Texas, has disclosed a data breach involving sensitive personal and financial consumer information.

The breach was reported to the Massachusetts Office of Consumer Affairs and Business Regulation on Oct. 13, 2026, with 1,420 Massachusetts residents identified as affected. On Oct. 13, 2026, the company began notifying affected individuals by written notice.

At this time, key details such as the nature of the incident or the period of unauthorized access remains undisclosed publicly.

The personally identifiable information exposed in the breach included Social Security numbers and driver's license numbers, financial account details and credit or debit card numbers.

JM Bullion's response to the breach

JM Bullion is offering affected individuals 24 months of complimentary credit monitoring and identity protection services through Experian IdentityWorks.

Affected individuals can enroll in credit monitoring by visiting the Experian IdentityWorks enrollment page and entering the activation code provided in their notification letter. Enrollment must be completed by Jan. 29, 2027.

The company has also set up a dedicated assistance line for individuals with questions about the incident or who need help with identity restoration. The line is available Monday through Friday from 8 a.m. to 8 p.m. Central Time, excluding major U.S. holidays. The phone number is included in the notification letter sent to affected individuals.