Leak-site post naming Optimum First Mortgage, captured by ThreatCluster

Optimum First Mortgage

pear

Ransomware leak-site victim intelligence · EN

Data size
9.3 Tb
Posted
Jun 19, 2026
Country
United States
Industry
Finance Lending & Brokerage

Summary

Written by ThreatCluster from victim profile, leak post, our reporting

Pear claims to have exfiltrated 9.3 TB of Optimum First Mortgage data. The leak page states the stolen data includes HR and recruitment records, internal documentation and source code. The leak post is published, and news reporting states Optimum First Mortgage confirmed a data breach attributed to Pear, with sensitive personal information such as Social Security numbers, tax records and bank details potentially exposed for current and former customers.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Headquarters
United States
Revenue
$48M
Domains
optimumfirst.com

What was taken

Providing fast and reliable mortgage solutions, including home purchases and refinancing options

Data categories
Financial dataHR dataPIIPHIEmailsDatabasesMailbox data
Leak site tags
FinancialHRPIIPHIMailboxesDatabase expsOneDrive data

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the text "OPTIMUM FIRST MORTGAGE" with a stylized house icon above it.
onion leak page 23 KB