J.M. Forbes & Co.
ent_0c7f8c45238a84be53a1654b
Disclosures
4
State AG · 3 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
45
nationwide · State AG NH
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- J.M. Forbes & Co.
- Normalized
- jm forbes— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- jmforbes.com
Disclosure history (4)newest first
- ⛰️New Hampshire State AGas victim2026-07-06
JM Forbes and Co. filed a supplemental notice to the New Hampshire Attorney General regarding a business email compromise incident. An unauthorized external party gained access to an employee email account via social engineering/phishing on November 17, 2025. The incident affected 45 individuals (26 NH residents), exposing names, addresses, SSNs, and account numbers. No fraudulent transactions occurred. JMF offered 2 years of credit monitoring.
- 🍁Vermont State AGas victim2026-04-07
J.M. Forbes & Co. notified consumers of a security incident detected on November 17, 2025, involving unauthorized access to an employee email account. The breach was part of a business email compromise attempt via social engineering. Affected data included names, addresses, Social Security numbers, and account numbers. No fraudulent transactions occurred. The company engaged forensic experts and offers two years of credit monitoring.
- ⛰️New Hampshire State AGas victim2026-04-07
JM Forbes & Co., a wealth management firm, notified the New Hampshire Attorney General of a security incident affecting 19 residents. On November 17, 2025, suspicious activity was detected on an employee email account. Investigation determined unauthorized access occurred via social engineering (business email compromise). Affected data included names, addresses, SSNs, and account numbers. No fraudulent transactions occurred. JMF provided two years of credit monitoring and enhanced safeguards.
- 🦞Maine State AGas victim2026-04-07
JM Forbes & Co. reported a business email compromise incident involving unauthorized access to an email account via social engineering. Discovered March 25, 2026, no evidence of data misuse was found. 23 Maine residents notified with credit monitoring offers.