Skip to content
Leak-site post naming Optimum First Mortgage (Pear's acting group's promotional blog), captured by ThreatCluster

Optimum First Mortgage (Pear's acting group's promotional blog)

blacknevas

Ransomware leak-site victim intelligence · EN

Data size
9.3TB
Posted
Sep 16, 2026
Industry
Financial Services

Victim profile

Domains
www.optimumfirst.com

What was taken

Mortgage solutions provider offering home purchase loans and refinancing; wholesale lender in the U.S.

Data categories
Financial dataHR dataPIIPHIEmailsDatabasesMailboxes
Leak site tags
Optimum First MortgagePromotional blogFinanceBrokerage

Leak-site images (5)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image depicts a dark office environment with several hooded figures seated at desks, each facing multiple monitors displaying green data and graphs, with a city skyline visible through large windows.
onion leak page83 KB
Logo featuring the text "OPTIMUM FIRST" with a house icon, related to mortgage services.
onion leak page6.1 KB
The image depicts a dark, high-tech room with multiple computer screens displaying data and a world map, featuring individuals in hooded sweatshirts working at the computers.
onion leak page80 KB
The image shows a group of individuals in hooded sweatshirts working at multiple computer stations, with a display of industrial products and a banner in the background.
onion leak page654 KB