JM Bullion, Inc.

Someone held unauthorized access to JM Bullion's systems from April 12 to April 14, 2026, reaching names, Social Security numbers, driver's licenses, financial details, and payment card numbers. The filings name no entry point and no count, only affected residents in states like Massachusetts and Rhode Island. A bullion dealer kept each buyer's identity and means of payment together in one reachable place. The intrusion was caught in two days; the customers heard about it six months later. And JM Bullion knows the pain of breaches from experience, having suffered a Magecart skimming attack in 2020.