JM Bullion Data Breach Exposes Social Security Numbers

JM Bullion Inc., an online retailer of physical precious metals based in Dallas, Texas, has disclosed a data breach involving sensitive personal and financial consumer information.

JM Bullion discovered the incident on April 14, 2026. An investigation into the incident determined that between April 12, 2026, and April 14, 2026, an unauthorized party gained access to JM Bullion's systems, allowing them to gain access to senstivie customer information.

The personally identifiable information exposed in the breach included names, Social Security numbers and driver's license numbers, financial account details and credit or debit card numbers.

The breach was reported to the attorneys general of California and South Carolina. In addition, a disclosure was made to the Massachusetts Office of Consumer Affairs and Business Regulation on Oct. 13, 2026.

On Oct. 13, 2026, the company began notifying affected individuals by written notice. So far, 1,420 Massachusetts residents, 1,022 South Carolina residents and 252 Rhode Island residents were identified as affected.

JM Bullion's response to the breach

JM Bullion is offering affected individuals 24 months of complimentary credit monitoring and identity protection services through Experian IdentityWorks.

Affected individuals can enroll in credit monitoring by visiting the Experian IdentityWorks enrollment page and entering the activation code provided in their notification letter. Enrollment must be completed by Jan. 29, 2027.

The company has also set up a dedicated assistance line for individuals with questions about the incident or who need help with identity restoration. The line is available Monday through Friday from 8 a.m. to 8 p.m. Central Time, excluding major U.S. holidays. The phone number is included in the notification letter sent to affected individuals.