Social EngineeringPhishingCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
J.M. Forbes & Co.
bd_a5dc2e414705c04d · schema v1 · pii pii-v1
Full breach record for J.M. Forbes & Co. →JM Forbes and Co. filed a supplemental notice to the New Hampshire Attorney General regarding a business email compromise incident. An unauthorized external party gained access to an employee email account via social engineering/phishing on November 17, 2025. The incident affected 45 individuals (26 NH residents), exposing names, addresses, SSNs, and account numbers. No fraudulent transactions occurred. JMF offered 2 years of credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2d8fdc40759510b0Vermont State AGfiled 2026-04-07(90d gap)Candidate
- bd_66f15480d78ef9f6New Hampshire State AGfiled 2026-04-07(90d gap)Verified
- bd_ba4b31877e8d09b1Maine State AGfiled 2026-04-07(90d gap)Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/jm-forbes-20260706.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 6, 2026
- Raw hash
- 6896926196ba03df4f042e27674230877601be03a325d629efc712e9d4b78879
Reporting entity
- Name
- J.M. Forbes & Co.norm: jm forbes
- Domain
- jmforbes.com
Victim entity
- Name
- J.M. Forbes & Co.norm: jm forbes
- Domain
- jmforbes.com
Incident
- Discovered
- Nov 17, 2025
- Materiality determined
- —
- Notification sent
- Apr 8, 2026
- Affected individuals
- 45
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 33 weeks(231 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.