---
title: "JM Bullion network data incident"
description: "JM Bullion’s California filing describes an April 2026 network incident and possible personal-information impact."
incident_type: "Cybersecurity incident"
status: "active"
last_modified: "2026-10-16"
canonical_url: "https://www.ally.security/incidents/jm-bullion-network-data-incident-2026"
markdown_url: "https://www.ally.security/incidents/jm-bullion-network-data-incident-2026.md"
stix_url: "https://www.ally.security/incidents/jm-bullion-network-data-incident-2026/stix.json"
---

# JM Bullion network data incident

JM Bullion’s California filing includes a notice describing suspicious network activity between April 12 and April 14, 2026. The company began investigating around April 14.

Last modified Oct 16, 2026 · 2 sources

## Summary

- **Environment:** Company network and personal information
- **Operational impact:** No operational outage established in the reviewed notice
- **Financial impact:** No incident cost established in the reviewed evidence

## What happened

[JM Bullion](https://www.jmbullion.com/)’s California filing includes a notice describing suspicious network activity between April 12 and April 14, 2026. The company began investigating around April 14. [2](#source-2)

The [California registry record](https://oag.ca.gov/ecrime/databreach/reports/sb24-631226) identifies JM Bullion as the organization behind the attached template. [1](#source-1)

## Impact

The letter says personal information was present in the affected data and describes the affected group as limited, without a number. Names are identified, while other recipient-specific fields are left blank. [2](#source-2)

The company said it was unaware of attempted or actual identity theft or fraud linked to the event at notice time. [2](#source-2)

## Timeline

### October 13, 2026 — Notification letter dated

The reviewed individual-notification template is dated October 13. See the [source notice](https://oag.ca.gov/system/files/JM%20Bullion%2C%20Inc.%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf). [2](#source-2)

### October 16, 2026 — Briefing updated

This briefing was last reviewed and updated on October 16, 2026.

## Threat Group & Attack Vector

The public filing does not establish the entry method, malware or attacker identity.

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- No specific MITRE ATT\&CK technique is currently mapped for this case.

## Response

The company reviewed the affected data, engaged cybersecurity specialists to strengthen systems and offered credit monitoring. The public template leaves the service duration blank. [2](#source-2)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/jm-bullion-network-data-incident-2026/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### California breach report: JM Bullion, Inc.

regulatory · California Department of Justice · Oct 13, 2026

<https://oag.ca.gov/ecrime/databreach/reports/sb24-631226>

<a id="source-2"></a>

### JM Bullion individual notice filed with California

official · JM Bullion, Inc. · Oct 13, 2026

<https://oag.ca.gov/system/files/JM%20Bullion%2C%20Inc.%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Occurred At · 100% confidence · current**  
   Notification letter dated: 2026-10-13
2. **Resulted In · 100% confidence · current**  
   JM Bullion network data incident: The company reviewed the affected data, engaged cybersecurity specialists to strengthen systems and offered credit monitoring. The public template leaves the service duration blank.
3. **Affected Organization · 100% confidence · current**  
   JM Bullion network data incident: JM Bullion, Inc.
4. **Resulted In · 100% confidence · current**  
   Notification letter dated: The reviewed individual-notification template is dated October 13.
5. **Resulted In · 100% confidence · current**  
   JM Bullion network data incident: The company said it was unaware of attempted or actual identity theft or fraud linked to the event at notice time.
6. **Resulted In · 100% confidence · current**  
   JM Bullion network data incident: California’s October 13, 2026 registry record identifies JM Bullion, Inc. as the organization for the attached notice template.
7. **Resulted In · 100% confidence · current**  
   JM Bullion network data incident: Notification letter dated
8. **Resulted In · 100% confidence · current**  
   JM Bullion network data incident: JM Bullion’s California filing includes a notice describing suspicious network activity between April 12 and April 14, 2026. The company began investigating around April 14.
9. **Resulted In · 100% confidence · current**  
   JM Bullion network data incident: The letter says personal information was present in the affected data and describes the affected group as limited, without a number. Names are identified, while other recipient-specific fields are left blank.

</details>