JM Bullion Data Breach Lawsuit Investigation
Received a April 2026 breach notice from JM Bullion?
Dapeer Law, P.A. is investigating a potential class action against JM Bullion, Inc., a Dallas-based online retailer of gold, silver, and other precious metals, on behalf of customers whose personal and financial information may have been exposed in the April 2026 cyber incident.
Who may qualify
You may be eligible to participate in a class action if any of the following applies:
- You received a data breach notification letter from JM Bullion dated April 2026.
- Your letter offered enrollment in free Experian IdentityWorks credit monitoring and identity protection.
- You are a current or former customer whose personal, payment, or financial information was held by JM Bullion in its capacity as an online precious metals dealer.
- No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
- Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.
Not sure if you qualify?
Send us your notice, we'll confirm your eligibility at no cost.
What happened
According to the notice filed with the California Attorney General, JM Bullion began investigating suspicious activity on its network on or about April 14, 2026. The investigation determined that the activity affected the company's network between April 12 and April 14, 2026. JM Bullion then conducted a review of the potentially affected information to determine what it contained and to whom it related.
Notice letters dated October 13, 2026 were sent roughly six months after the activity was discovered. Filings report that the information involved may include names, Social Security numbers, driver's license numbers, financial account information, and credit or debit card numbers. Reported state filings indicate approximately 1,420 Massachusetts residents and about 252 Rhode Island residents were notified. Recipients are offered complimentary credit monitoring and identity protection through Experian IdentityWorks, and the company states it engaged cybersecurity specialists and is reviewing its policies and procedures to add security measures.
Precious metals buyers often pay with cards or bank transfers and may hold significant value in their accounts and shipments. When Social Security numbers are exposed alongside card and financial account numbers, the risk of identity theft, account takeover, and payment fraud can persist for years. Our investigation is examining whether reasonable safeguards were in place, why notification took about six months, and whether JM Bullion's response met its obligations under state breach notification and consumer protection laws.
What to do if you received a letter
Keep your notice letter
Do not discard your JM Bullion breach notice. The letter contains the activation code for the free Experian IdentityWorks monitoring and lists the categories of information involved for you, which is important evidence if you decide to participate in a lawsuit.
Enroll in the free Experian credit monitoring
Enroll in the Experian IdentityWorks monitoring offered in your letter by January 29, 2027, using the activation code printed on it. Accepting this benefit does not waive your right to pursue legal action.
Place a fraud alert or credit freeze
Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide. Because card and financial account numbers may have been involved, also review bank, credit card, and investment statements for charges or transfers you do not recognize.
Speak with a data breach attorney
Consultations with Dapeer Law are free and confidential. We'll review your JM Bullion notice, explain your options, and advise whether you may be eligible to join a class action.
Submit your notice for a free review
Two minutes online. A licensed attorney reviews every submission.
Breach timeline
Compensation you may be entitled to
Out-of-pocket expenses
Credit freezes, identity restoration services, and other costs incurred responding to the breach.
Time spent monitoring
Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.
Identity theft & fraud losses
Unreimbursed funds stolen from accounts, unauthorized credit lines, or tax refund fraud tied to the breach.
Statutory damages
Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.
Injunctive relief
Court orders requiring JM Bullion to implement stronger data security practices going forward, including better protection of customer payment and financial account data.
Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.
Common questions
I received a data breach letter from JM Bullion. What should I do? +
Confirm the letter is authentic, keep it, and enroll in the free Experian IdentityWorks monitoring by January 29, 2027. Review bank, credit card, and investment statements for unfamiliar activity, check your credit reports for accounts you did not open, and consider a fraud alert or security freeze with the three credit bureaus. Document any time or money you spend responding, and consider speaking with a data breach attorney about your options.
Am I eligible to join a class action against JM Bullion? +
Anyone who received a JM Bullion breach notice about the April 2026 incident is a likely candidate, which typically means current or former customers. Eligibility for any future class action will also depend on your state of residence, the categories of your data that were involved, and any documented losses or out-of-pocket expenses.
How much money could I receive from a class action lawsuit? +
Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.
What personal information was exposed in the breach? +
Filings indicate the information involved may include names, Social Security numbers, driver's license numbers, financial account information, and credit or debit card numbers. The California sample notice leaves the specific data elements blank, so your own letter is the most reliable source for what applied to you.
Did JM Bullion offer free credit monitoring? +
Yes. JM Bullion is offering complimentary credit monitoring and identity protection through Experian IdentityWorks. You must enroll yourself using the activation code in your letter by January 29, 2027, and the length of the service is stated in your individual letter. Enrolling does not waive your right to bring a claim.
How many people were affected by the JM Bullion breach? +
The California Attorney General filing does not include a nationwide total. Reported state filings indicate approximately 1,420 Massachusetts residents and about 252 Rhode Island residents were notified, and the nationwide total may be higher. This page will be updated as more information becomes available.
Is there a deadline to take legal action? +
Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.
How do I get a copy of the official breach notice? +
The sample notice JM Bullion submitted to the California Attorney General is posted on the California AG's data breach registry and is linked in the Sources & References section below. If you cannot locate your individual letter, Dapeer Law can help you obtain a copy as part of a free consultation.
Sources & references
- Official breach notice filing · California Attorney General, JM Bullion, Inc. Notice of Data Event (PDF)
- Company · JM Bullion, Inc. (jmbullion.com)
- Credit bureau freezes · Equifax · Experian · TransUnion
- Free weekly credit reports · AnnualCreditReport.com
- Identity theft recovery guide · FTC IdentityTheft.gov
Don't let the deadline decide for you. Submit your claim today.
You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.
