J.M. Forbes & Co. data breach

Clerk's notes

On April 7, 2026, J.M. Forbes & Co. filed a data breach report with the Vermont Attorney General's office, informing authorities and clients of an unauthorized intrusion into its digital systems. This report indicates that sensitive client information managed by the private wealth management and financial advisory institution may have been compromised.

J.M. Forbes & Co. specializes in multi-generational wealth management, investment portfolios, and complex estate assets, routinely handling deeply sensitive financial and personal records. The reported incident signifies a potential lapse in the rigorous security measures expected of a firm entrusted with such high-value information, making its clients a target for sophisticated cybercriminals.

The data categories reportedly exposed in the J.M. Forbes & Co. breach include Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Tax Return Information, Investment Portfolio Records, and Mailing Address. The unauthorized release of this combination of personal and financial information creates immediate and severe risks, including financial account takeover, targeted spear-phishing attempts, and potential for fraudulent tax filings.

Financial institutions like J.M. Forbes & Co. are legally obligated to safeguard non-public personal information under federal and state regulations. The occurrence of a data breach suggests potential shortcomings in their administrative, physical, or technical security safeguards, such as insufficient network protection or oversight of vendor security, which are essential for protecting client data.

If you have received a data breach notification letter from J.M. Forbes & Co., your private financial and personal information was likely exposed. This notification provides a basis for you to explore legal options. Understanding your rights and potential recourse in a data breach event is a prudent step. You can seek a complimentary review of your specific situation to learn more about the implications of this incident.

If a notification letter about this breach reached you, see every Vermont data breach on file or browse all cases.