Precious-metals retailer JM Bullion filed breach notices with California, South Carolina and Massachusetts on Oct 13. Its letter says it began investigating suspicious network activity on about April 14, 2026, covering April 12-14, and only recently finished identifying affected people. Exposed data varies by person and can include name with Social Security number, driver's license number, financial account details and credit/debit card numbers. Filings count 1,022 South Carolina and 1,420 Massachusetts residents; no total was given. The company says it is unaware of identity theft or fraud and is offering Experian credit monitoring.