PhishingPhishingCustomer Data InvolvedDownstream VictimsPIIIDENTITY_GOVERNMENTMediumContained
J.M. Forbes & Co.
bd_ba4b31877e8d09b1 · schema v1 · pii pii-v1
Full breach record for J.M. Forbes & Co. →JM Forbes & Co. reported a business email compromise incident involving unauthorized access to an email account via social engineering. Discovered March 25, 2026, no evidence of data misuse was found. 23 Maine residents notified with credit monitoring offers.
Maine clockDiscovered Mar 25, 2026 → Filed with AG Apr 7, 202613d ✓ ME AG ≤30d13 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2d8fdc40759510b0Vermont State AGfiled 2026-04-07Candidate
- bd_66f15480d78ef9f6New Hampshire State AGfiled 2026-04-07Verified
- bd_a5dc2e414705c04dNew Hampshire State AGfiled 2026-07-06(90d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3518a2e2-0f7d-4608-8736-55822542bb18.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 7, 2026
- Raw hash
- 1b750650dacd1953d805abded0e8d6512e15c42b2d7ba0436c52c626800cce9c
Reporting entity
- Name
- J.M. Forbes & Co.norm: jm forbes
- Domain
- jmforbes.com
Victim entity
- Name
- J.M. Forbes & Co.norm: jm forbes
- Domain
- jmforbes.com
Incident
- Discovered
- Mar 25, 2026
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 23
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566 Phishing
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 13 days(13 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 13d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 25, 2026→ Filed with AG: Apr 7, 202613d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.