JM Bullion, an online retailer of precious metals, discovered a data breach on April 14, 2026. Unauthorized parties gained access to customer systems between April 12 and April 14, 2026. The company began notifying affected consumers by written notice on October 13, 2026. The breach was also reported to state regulators, including the California and Massachusetts attorneys general.
The compromised data potentially includes names, Social Security numbers, driver’s license numbers, financial account information, and credit/debit card numbers. While the nationwide total of affected individuals remains unconfirmed, at least 1,672 people across Massachusetts (1,420 individuals) and Rhode Island (252 individuals) have been publicly identified as impacted by the breach.
Additional details, such as the full nationwide affected population, a complete list of all impacted states, and the official breach notification letter, have not been publicly confirmed as of the available reporting. Further information may emerge as investigations continue.