Thursday, February 27, 2025
HomeData BreachGold Seller JM Bullion Hacked - Attackers Steals Credit Card and Personal...

Gold Seller JM Bullion Hacked – Attackers Steals Credit Card and Personal Details

Published on

SIEM as a Service

Follow Us on Google News

“JM Bullion” company is one of the largest and most premier online retailers of precious metals like gold, silver, copper, platinum, and palladium products in the world.

JM Bullion, Inc. (“JM Bullion”) and the “Provident Metals”(a subsidiary of JM Bullion company) has disclosed a data breach after their website was hacked to include malicious scripts that steal the customer’s personal and card details.

The company has sent a ‘Notice of Data Security Incident’ to its customers about the security breach that took place on February 18, 2020, when their staff discovered a malicious script on the website.

JM Bullion’s notice reads, “On July 6, 2020, JM Bullion was alerted to suspicious activity on its website. JM Bullion immediately began an investigation, with the assistance of a third-party forensic specialist, to assess the nature and scope of the incident. Through an investigation, it was determined that malicious code was present on the website from February 18, 2020 to July 17, 2020, which had the ability to capture customer information entered into the website in limited scenarios while making a purchase”.

JM Bullion determined the type of information potentially impacted by this incident includes your name, address, and payment card information (account number, card expiration date, and security code).

JM Bullion ‘Notice of Data Security Incident’

In response to this incident, JM Bullion notified law enforcement, card processor, and the credit card brands, and continues to work with them as needed.

The company also reviewed its internal procedures and implemented additional safeguards on its website to protect customer information in their possession, reads JM Bullion’s notice.

Steps enclosed to help protect against Identity Theft and Fraud

The company suggested the following steps for the customers to protect their identity and uncover any deceitful activity on their accounts.

  • Watchful to review your account statements and monitor your credit reports for suspicious activity.
  • You can place a “security freeze” on your credit report which prevents potential creditors from accessing your credit file.
  • As an alternative to a security freeze, you can also place an initial or extended “fraud alert” on your file at no cost.
  • Can contact the consumer reporting agencies, the Federal Trade Commission, or your state Attorney General for your protection.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity and hacking news updates.

Also Read

Underground Black-Market Website ‘BriansClub’ Hacked – 26 Million Stolen Credit Cards Rescued

Most Important Consideration For Credit Card Fraud You Need to Know To Secure You Transactions

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

VS Code Extension with 9 Million Installs Attacks Developers with Malicious Code

Microsoft has removed two widely-used Visual Studio Code (VS Code) extensions, “Material Theme Free”...

New Anubis Ransomware Targets Windows, Linux, NAS, and ESXi x64/x32 Environments

A new ransomware group, dubbed Anubis, has emerged as a significant threat in the...

WordPress Admins Warned of Fake Plugins Injecting Malicious Links into Websites

A new wave of cyberattacks targeting WordPress websites has been uncovered, with attackers leveraging...

LARVA-208 Hackers Compromise 618 Organizations Stealing Logins and Deploying Ransomware

A newly identified cybercriminal group, LARVA-208, also known as EncryptHub, has successfully infiltrated 618...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Authorities Arrested Hacker Behind 90 Major Data Breaches Worldwide

Cybersecurity firm Group-IB, alongside the Royal Thai Police and Singapore Police Force, announced the...

Orange Communication Breached – Hackers Allegedly Claim 380,000 Email Records Exposed

Telecommunications provider Orange Communication faces a potential data breach after a threat actor using the pseudonym “Rey”...

US Employee Background Check Firm Hacked, 3 Million Records Exposed

DISA Global Solutions, a Houston-based provider of employee background checks and workplace safety services,...