Almeida Law Group is investigating a data breach at JM Bullion, Inc. The breach occurred on April 12th, 2026. If you were affected, contact Almeida Law Group.
About JM Bullion, Inc.
JM Bullion, Inc. is an online retailer specializing in precious metals investment products, selling physical gold, silver, copper, platinum, and palladium bullion in the form of bars, coins, and rounds. Founded in 2011, the company operates multiple e-commerce websites including JMBullion.com, ProvidentMetals.com, and Silver.com, and reports having served over 500,000 customers. JM Bullion is headquartered in Dallas, Texas, and has been a subsidiary of A-Mark Precious Metals, Inc. since March 2021. Because customers purchase physical investment products through its platforms, the company collects personal and financial information as part of the transaction process.
What Happened?
JM Bullion, Inc. was listed in a California Attorney General sample breach notice filed on October 13th, 2026. According to that notice, suspicious activity was detected on April 14th, 2026, affecting the company’s network between April 12th, 2026, and April 14th, 2026. JM Bullion states that the incident affected a limited number of individuals. The notice confirms that affected individuals’ names were involved, but the specific additional data elements compromised were not specified in the notice — the relevant field contains an unfilled template placeholder. As a precaution, JM Bullion is offering Experian IdentityWorks credit monitoring to affected individuals, with an enrollment deadline of January 29th, 2027.
This 2026 incident is separate from a prior and well-documented breach. In 2020, malicious skimming code was present on JM Bullion’s website from February 18th, 2020, to July 17th, 2020, compromising customer names, addresses, and payment card information. That breach led to a class action lawsuit — Newman v. JM Bullion, Inc., Case No. BCV-21-100436 — which settled in 2024 for approximately $14.8 million. No ransomware group claims, threat-actor attribution, or independent media coverage specific to the 2026 incident have been identified. At least one plaintiff law firm has publicly listed a JM Bullion data breach investigation as an active matter, suggesting early plaintiff-side interest in this new incident.
Key Facts at a Glance
- Company or Organization: JM Bullion, Inc.
- Industry: E-commerce / Precious metals retail
- Location: Dallas, Texas
- Incident type: Network intrusion / unauthorized access
- Date of breach: April 12th, 2026
- Date breach discovered: April 14th, 2026
- Date of consumer notification: October 13th, 2026
- Identity theft protection offered: Experian IdentityWorks credit monitoring (no cost)
- Enrollment deadline: January 29th, 2027
- Prior breach: 2020 Magecart-style payment card skimming breach; settled class action (Newman v. JM Bullion) for approximately $14.8 million in 2024
- Litigation status: No confirmed class action filed for the 2026 incident; at least one plaintiff law firm has listed it as an active investigation
- Source: California Attorney General Breach Report (SB24-631226); JM Bullion Notice of Data Event (PDF); BleepingComputer – 2020 breach reporting; Crosner Legal – 2020 class action settlement; Cole & Van Note – JM Bullion Breach Investigation
What Should You Do?
If you received a notice from JM Bullion, enroll in the complimentary Experian IdentityWorks credit monitoring service before the January 29th, 2027 deadline. You should also place a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to make it harder for anyone to open new accounts in your name. Review your account statements and credit reports carefully for any unfamiliar activity. You can request a free credit report from each bureau at AnnualCreditReport.com. If you discover signs of identity theft, visit IdentityTheft.gov for step-by-step guidance on reporting and recovery.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
