J.M. Forbes & Co.
bd_66f15480d78ef9f6 · schema v1 · pii pii-v1
Full breach record for J.M. Forbes & Co. →JM Forbes & Co., a wealth management firm, notified the New Hampshire Attorney General of a security incident affecting 19 residents. On November 17, 2025, suspicious activity was detected on an employee email account. Investigation determined unauthorized access occurred via social engineering (business email compromise). Affected data included names, addresses, SSNs, and account numbers. No fraudulent transactions occurred. JMF provided two years of credit monitoring and enhanced safeguards.
J jump to incidentP pin to compareR raw source
Incident timeline
Nov 17, 2025
Discovered
Apr 7, 2026
Filed
vs. sector median
+12 wks slower
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Vermont State AGbd_2d8fdc40759510b02026-04-07Candidate
- Massachusetts State AGbd_af0270378c3951342026-04-07Verified
- Maine State AGbd_ba4b31877e8d09b12026-04-07Verified by operator
- Nebraska State AGbd_98d54460da9f9c8f2026-07-06 · +90dVerified
Show 1 more filing ↓Show fewer ↑up to 90d gap
- New Hampshire State AGbd_a5dc2e414705c04d2026-07-06 · +90dVerified
Filing propagation · 6 filings · 5 states
View merged incident ↗Pattern: first filing Apr 7 (VT), last Jul 6 (NH) — a 90-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.