J.M. Forbes & Co.
bd_98d54460da9f9c8f · schema v1 · pii pii-v1
Full breach record for J.M. Forbes & Co. →JM Forbes and Co experienced a security incident on November 17, 2025, involving suspicious activity on its email system. An unauthorized external party gained access to an employee email account via social engineering (business email compromise attempt) to redirect payments. The attempt was stopped before fraudulent transactions occurred. Affected data included names, addresses, Social Security numbers, and account numbers. JM Forbes notified affected individuals starting April 8, 2026, and offered two years of complimentary credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Nov 17, 2025
Discovered
Jul 6, 2026
Filed
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- New Hampshire State AGbd_a5dc2e414705c04d2026-07-06Verified
- Vermont State AGbd_2d8fdc40759510b02026-04-07 · +90dCandidate
- New Hampshire State AGbd_66f15480d78ef9f62026-04-07 · +90dVerified
- Massachusetts State AGbd_af0270378c3951342026-04-07 · +90dVerified
Show 1 more filing ↓Show fewer ↑up to 90d gap
- Maine State AGbd_ba4b31877e8d09b12026-04-07 · +90dVerified by operator
Filing propagation · 6 filings · 5 states
View merged incident ↗Pattern: first filing Apr 7 (VT), last Jul 6 (NE) — a 90-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.