Skip to content
Leak-site post naming First Commerce LLC, captured by ThreatCluster

First Commerce LLC

pear

Ransomware leak-site victim intelligence

Data size
1 Tb
Posted
Aug 21, 2026
Country
USA
Industry
Advertising Networks, Finance & Real Estate Business Services

Summary

Written by ThreatClusterfrom victim profile, leak post

pear claims about 1 TB of data from First Commerce LLC (domain firstcommercellc.com) has been leaked, describing the victim as a privately held real estate investment and development company in the USA. The group states the leaked data includes HR and recruitment records, internal documentation and source code. The leak post is published; the victim profile lists domain firstcommercellc.com, sectors Advertising Networks, Finance & Real Estate Business Services, and country USA.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
firstcommercellc.com
Platforms
OneDrive
People named
Arthur Berg Mick D'Mark John Berg

What was taken

Privately held real estate investment and development company

Data categories
FinancialsHRPartners’ & Vendors’ DataPayment DetailsOneDrive Stored DataMailboxes & Email CorrespondenceClients’ & Customers’ Private and Business DataTheir Contacts
Leak site tags
Advertising NetworksFinance & Real EstateHR dataPartners’ & Vendors’ Data
File types seen
zip × 1
Sample files (1)
firstcommercellc.com_fileTree.zip

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Download Data 1
http://smnalvhqecyjf7reptunoevh6jd6x7ofpz4tj2plyg5a4q667givgqyd.onion/firstcommercellc.com
Download Data 2
http://3hzi7qjklm632atxj5k67p3bxdie5aipvf6tsbtc2xlfbcellujyxryd.onion/firstcommercellc.com
Download File Tree
http://njqaowdto3tfbbco575fkmhahszxfw7fiprbfmt6y6kfy5fntt45akyd.onion/firstcommercellc.com_fileTree.zip

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo only, no data visible.
onion leak page17 KB

Negotiation

Tox 457BB4E5DF0E650509322CA894758D925A568828090A3449D5AEEED30E9B8E18DDDFF71909ED