GOLD.COM, INC.

JM Bullion, Inc. based in Dallas, Texas, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-08-28 and reported on 2026-10-16. 6,640 Texas residents were affected. 78,451 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number);Date of Birth. Consumers were notified via U.S. Mail.

JM Bullion, Inc. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-10-13. The reporting organization type is Other Commercial. 156 Vermont residents were affected. Categories of data breached: Social Security Numbers, Government ID Numbers, Financial Account Codes, Credit and Debit Account Info.

JM Bullion, Inc. notified California residents of a security incident affecting personal information. Unauthorized access occurred between April 12 and April 14, 2026. The company commenced an investigation on April 14, 2026, upon detecting suspicious activity. Affected data includes names in combination with other unspecified elements. JM Bullion engaged cybersecurity specialists, reviewed policies, and offered credit monitoring via Experian. The incident is contained.

JM Bullion, Inc. notified the New Hampshire Attorney General of an incident where an unauthorized actor accessed or acquired data between April 12 and April 14, 2026. The company became aware of suspicious activity on April 14, 2026. The incident affected 554 New Hampshire residents, exposing name and financial account information. JM Bullion engaged cybersecurity specialists, notified federal law enforcement, and is offering 12 months of credit monitoring through Experian.

JM Bullion, Inc., a business sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2026-04-14 and filed notice on 2026-10-13. 2,366 Washington residents were affected. 182 days elapsed between awareness and notification. 2 days to identify the breach. 0 days to contain the breach.

JM Bullion, Inc. notified consumers of a security incident affecting its network between April 12 and April 14, 2026. The company commenced an investigation on April 14, 2026, after detecting suspicious activity. The incident involved names in combination with other unspecified data elements. JM Bullion engaged cybersecurity specialists, reviewed policies, and offered credit monitoring via Experian. The notice was sent on October 13, 2026.

JM Bullion, Inc. notified Massachusetts residents of a security incident potentially impacting personal information. The company stated it has updated administrative and technical safeguards and provided cybersecurity training. No specific dates of discovery or occurrence were provided in the notice. Affected individuals are offered 24 months of complimentary credit monitoring through Experian. The incident is described as contained with no known misuse of information.

New Hampshire Attorney General notice regarding JM Bullion, Inc. and Provident Metals Corp. Malicious code (web skimmer) was present on jmbullion.com (Feb 18–Jul 17, 2020) and providentmetals.com (Jan 1–Jul 17, 2020), capturing customer name, address, and payment card data. 170 NH residents affected. Incident discovered July 6, 2020. Notices sent Oct 28, 2020. Forensic specialist engaged; payment processors notified; safeguards implemented.

JM Bullion, Inc. reported an external system breach (hacking) occurring between January 1, 2020, and July 17, 2020, discovered on July 6, 2020. The incident compromised names and financial account/credit card numbers (including security codes/PINs) for 28,234 individuals, including 134 Maine residents. Written notification was sent on October 28, 2020. No identity theft protection services were offered.

JM Bullion, Inc. disclosed that malicious code (web skimmer) was present on its website from February 18, 2020, to July 17, 2020, capable of capturing customer payment card information (account number, expiration date, security code) and personal details (name, address) during purchases. The company detected suspicious activity on July 6, 2020, engaged forensic specialists, removed the code, and notified law enforcement and card brands.