UnknownRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)LowContained

JM BULLION, INC.

bd_8b20805de865a2d4 · schema v1 · pii pii-v2

Severity

Low

Discovered

Apr 14, 2026

Filed

Oct 13, 2026

To disclose

26 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

70%

Full breach record for JM BULLION, INC. →4 incidents on file

JM Bullion, Inc. notified California residents of a security incident affecting personal information. Unauthorized access occurred between April 12 and April 14, 2026. The company commenced an investigation on April 14, 2026, upon detecting suspicious activity. Affected data includes names in combination with other unspecified elements. JM Bullion engaged cybersecurity specialists, reviewed policies, and offered credit monitoring via Experian. The incident is contained.

J jump to incidentP pin to compareR raw source

California clockDiscovered Apr 14, 2026 → Notified Oct 13, 2026182d ✗ CA 30-day late26 weeks discovery → filing

Incident timeline

undetected · 2 days

discovery → filing · 26 weeks / 182 days

Apr 12, 2026

Begins

Apr 14, 2026

Discovered

Oct 13, 2026

Filed

vs. sector median

+16 wks slower

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Vermont State AGbd_2d616fc84e84469d2026-10-13Verified
New Hampshire State AGbd_a8f29346417b3c0f2026-10-13Verified
Washington State AGbd_afa639f16bb51c5c2026-10-13Verified
South Carolina State AGbd_cde38b844a76ed702026-10-13Verified

Show 1 more filing ↓up to 3d gap

Texas State AGbd_02f410e9c817a8f22026-10-16 · +3dVerified

Name: JM BULLION, INC.
norm: jm bullion

Name: JM BULLION, INC.
norm: jm bullion
Industry: Retail & Consumerllm

Discovered: Apr 14, 2026
Breach occurred: Apr 12, 2026 – Apr 14, 2026
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 13, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unknown

During the incident: Commenced an investigation into suspicious activity
Undertook a thorough review of the impacted data to determine its contents and to whom it related
Engaged cybersecurity specialists to strengthen our systems
Offering access to credit monitoring services through Experian at no cost
Changes made: Working to review our existing policies and procedures to implement additional security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(182 days from discovery to filing)
Compliance flags: CA 30-day late · 182d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Apr 14, 2026
→ Notified: Oct 13, 2026
182d 30 calendar days CA 30-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Apr 14, 2026 → Notified: Oct 13, 2026	182d	30 calendar days	CA 30-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Vermont State AGOct 13 · first

New Hampshire State AGOct 13 · first

Washington State AGOct 13 · first

South Carolina State AGOct 13 · first

California State AGOct 13 · first · this page

Texas State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-631226
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 13, 2026
Raw hash: bc590919281382c80b2d942284929d8f9d7d8e2e193f0af6602c4e878457c6ac

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityJM BULLION, INC.

Victim entityJM BULLION, INC.

Incidentdiscovered Apr 14, 2026

Stated responseCommenced an investigation into suspicious activity

ComplianceCA 30-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov