JM Forbes & Co. Data Breach Lawsuit Investigation
Investment advisory firm JM Forbes & Co. is notifying clients that an unauthorized party accessed a company email account, exposing sensitive personal data. If you received a breach letter dated April 7, 2026, you may be entitled to free credit monitoring and potential legal remedies. Use the resources below to protect yourself and explore your options.
Key Facts at a Glance
Discovery of suspicious email activity: November 17, 2025
Investigation confirmed unauthorized access: March 25, 2026
Consumer notices mailed: April 7, 2026
Data involved: name, address, Social Security number, and account numbers (no security codes)
Credit monitoring offered: complimentary enrollment for two years (deadline July 31, 2026)
Number of affected individuals: not disclosed in the notice
How the JM Forbes & Co. Breach Happened
According to the Maine Attorney General filing, JM Forbes & Co. (“John Murray Forbes & Company — JM Forbes & Co.”) detected suspicious activity in an employee’s email account on November 17, 2025. A social-engineering attack allowed an external actor to gain access in an apparent business email compromise scheme designed to redirect payments. The firm reports that its compliance monitoring tools flagged the unusual activity quickly, stopping the attempt before any fraudulent transactions occurred.
Information Exposed
The compromised email account may have contained the following personal information:
Name
Address
Social Security number
Bank or investment account numbers (without associated security codes)
JM Forbes & Co. states it has no evidence that this data has been misused.
Company Response
Upon discovery, the firm locked down the affected account and engaged outside legal counsel and cybersecurity forensic experts. JM Forbes & Co. says it strengthened internal controls and is offering all notified individuals two years of complimentary credit monitoring services. Impacted clients must enroll by July 31, 2026, using the instructions included in their notification letter.
What You Can Do Now
Enroll in the free credit monitoring service before the July 31 deadline.
Review bank, brokerage, and credit card statements for unauthorized activity.
Obtain your free annual credit reports and look for unfamiliar accounts.
Contact JM Forbes & Co. partners Beth Colt (617-316-7015), Jeff Bernier (617-316-7018), or Bracken Hendricks (617-316-7028) with questions.
Consult qualified counsel to determine whether you are eligible to participate in a data breach lawsuit or settlement.
Lawsuit Investigation & Your Rights
Law firms are investigating whether JM Forbes & Co. employed reasonable cybersecurity safeguards as required under state and federal law. Impacted individuals may be entitled to monetary damages or injunctive relief. Preserve your letters and any expense receipts related to fraud or identity-theft prevention to support a potential claim.
Company Overview
JM Forbes & Co. is a private investment advisory firm founded in 1838 and headquartered at 121 Mount Vernon Street, Boston, Massachusetts, United States.
Website: jmforbes.com
Industry: Investment & Wealth Management
Founded: 1838
Headquarters: Boston, MA, USA
Sources
Impacted Entities
Frequently Asked Questions
I received a data breach letter from JM Forbes & Co. — what should I do?
Confirm the letter is genuine, enroll in the complimentary two-year credit monitoring before July 31, 2026, and monitor your financial accounts for unusual activity.
How do I submit a claim related to the JM Forbes & Co. data breach?
Preserve your notification letter and any fraud-related costs, then consult a data privacy attorney or class-action firm to learn about pending lawsuits or settlement options.
Am I eligible to join a lawsuit against JM Forbes & Co.?
If your personal information was included in the April 7, 2026 notice, you may qualify. Eligibility typically depends on residency and proof of impact.
What information did the JM Forbes & Co. breach expose?
The compromised email account may have contained your name, address, Social Security number, and certain account numbers without security codes.
Did JM Forbes & Co. offer credit monitoring, and for how long?
Yes. The firm is offering two years of complimentary credit monitoring to all notified individuals, with an enrollment deadline of July 31, 2026.
How many people were affected by the JM Forbes & Co. breach?
The number of impacted individuals was not disclosed in the Maine Attorney General filing.
How can I get the official breach notice (PDF) for JM Forbes & Co.?
You can download the notice directly from the Maine Attorney General’s website using the link provided above.
Attorney Advertising. Prior results do not guarantee a similar outcome.
