Social EngineeringFinancial ServicesFinancePhishingCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

J.M. Forbes & Co.

bd_a5dc2e414705c04d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 17, 2025

Filed

Jul 6, 2026

To disclose

33 weeks

Affected · nationwide

4526 in this filing

Linked

6 filings

Confidence

67%

Full breach record for J.M. Forbes & Co. →

JM Forbes and Co. filed a supplemental notice to the New Hampshire Attorney General regarding a business email compromise incident. An unauthorized external party gained access to an employee email account via social engineering/phishing on November 17, 2025. The incident affected 45 individuals (26 NH residents), exposing names, addresses, SSNs, and account numbers. No fraudulent transactions occurred. JMF offered 2 years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 33 weeks / 231 days

Nov 17, 2025

Discovered

Jul 6, 2026

Filed

vs. sector median

+25 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Nebraska State AGbd_98d54460da9f9c8f2026-07-06Verified
Vermont State AGbd_2d8fdc40759510b02026-04-07 · +90dCandidate
New Hampshire State AGbd_66f15480d78ef9f62026-04-07 · +90dVerified
Massachusetts State AGbd_af0270378c3951342026-04-07 · +90dVerified

Show 1 more filing ↓up to 90d gap

Maine State AGbd_ba4b31877e8d09b12026-04-07 · +90dVerified by operator

Name: J.M. Forbes & Co.
norm: jm forbes
Domain: jmforbes.com

Name: J.M. Forbes & Co.
norm: jm forbes
Domain: jmforbes.com
Industry: Financial Servicesllm

Discovered: Nov 17, 2025
Materiality determined: —
Notification sent: Apr 8, 2026
Affected individuals: 45state + nationwide
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Took action to lock down the affected account
Launched an investigation with the assistance of outside legal counsel and cybersecurity forensic experts
Offering you two years of complimentary credit monitoring services
Changes made: Maintain a strong control environment and robust compliance policies and procedures
Security monitoring, verification procedures and response protocols are designed to detect and address suspicious activity quickly
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 33 weeks(231 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Vermont State AGApr 7 · first

New Hampshire State AGApr 7 · first

Massachusetts State AGApr 7 · first

Maine State AGApr 7 · first

Nebraska State AG+90d

New Hampshire State AG+90d · this page

Pattern: first filing Apr 7 (VT), last Jul 6 (NH) — a 90-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/jm-forbes-20260706.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 6, 2026
Raw hash: 6896926196ba03df4f042e27674230877601be03a325d629efc712e9d4b78879

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityJ.M. Forbes & Co.

Victim entityJ.M. Forbes & Co.

Incidentdiscovered Nov 17, 2025

Stated responseTook action to lock down the affected account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov