JM Bullion Data Breach Reported in Vermont: What Affected Customers Should Do
JM Bullion, a major online precious metals retailer, reported a cybersecurity incident to Vermont authorities on October 13, 2026. This breach exposed a range of customer data, including personal and payment details, raising concerns about identity theft and fraud. Individuals who received a notification letter should assess their legal options.
This breach is real, not a scam. JM Bullion, Inc. officially reported it to the Vermont Attorney General on October 13, 2026.
Reviewed by David S. Harris, Esq., data breach and class action attorney (Florida Bar No. 0112739). Free consultation: 786-306-7278
Received a JM Bullion, Inc. notification letter? Find out in minutes if you qualify for compensation.
Free case review- State
- Vermont
- Reported
- October 13, 2026
What may have been exposed
- Full Name
- Email Address
- Mailing Address
- Phone Number
- Purchase and Order History
- Payment Card Information
- Account Password or Credentials
- Billing Details
JM Bullion, a prominent online retailer specializing in precious metals, officially reported a cybersecurity incident to the Vermont Attorney General on October 13, 2026. This alert indicates a compromise of the company's digital infrastructure, which handles a significant volume of sensitive customer information for thousands of collectors and investors.
The breach exposed several categories of personal and financial information. This includes your Full Name, Email Address, Mailing Address, Phone Number, Purchase and Order History, Payment Card Information, Account Password or Credentials, and Billing Details. Such a comprehensive exposure places affected individuals at a heightened risk of various forms of fraud and identity theft.
The detailed Purchase and Order History, especially concerning high-value precious metals, can signal significant disposable income to malicious actors, potentially leading to targeted physical theft or sophisticated spear-phishing campaigns. Furthermore, exposed Payment Card Information and contact details directly increase the likelihood of fraudulent charges and broader identity theft issues.
As a commercial entity handling consumer financial data, JM Bullion is obligated to implement and maintain reasonable cybersecurity measures to safeguard this sensitive information. A breach of this nature suggests potential failures in upholding these foundational duties, which could stem from inadequate vulnerability management, delayed patch deployment, or insufficient network segmentation.
Receiving a data breach notification letter from JM Bullion serves as confirmation that your confidential information was compromised due to this security incident. This establishes the necessary standing to explore legal recourse. Even without immediate financial loss, the increased risk of future identity theft and the violation of your privacy are actionable harms. If you received a breach notification, we invite you to take advantage of a free case review to understand your potential legal options.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Secure your online accounts
Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Vermont Attorney General filing
Related data breach cases
- Ohio Living
- Michael J. Berger and Co., CPA LLP
- CSX
- Networking Technology, Inc.
- Chevy Chase Club
- Computer Task Group, Incorporated
- STS Aviation Group
- The Way to My Heart Inc. (Global PAD Association)
- Kymberlie McNicholas
- Catawba County
- Johnson Investment CounselVT
- BBC International LLC
- Ganxxet, Inc.
- Johnson Investment Counsel