The blacknevas ransomware group listed Optimum First Mortgage (Pear's acting group's promotional blog) on its data leak site on 2026-09-16. Sector: Financial Services Domains named: wu22mxmkgd4hgs7j3x7aqurgzhwzy3gf5qpwngpobpnet4i6myebutyd.onion, optimumfirst.comlink, zvacnemrrluposfmwgp4bqvb34ipoorgh7yyqoozu6gcmh5z32wjgsad.onion, optimumfirst.comoptimum Claim as published on the leak site: Industry: Finance Lending & BrokerageLocation: USA Data Volume: 9.3TBData Description: Financials, HR, Clients’ Private Data & Financial Details, PII & PHI Records, Mailboxes & Email Correspondence, Database Exports, OneDrive StoredDownload:Link 1http://wu22mxmkgd4hgs7j3x7aqurgzhwzy3gf5qpwngpobpnet4i6myebutyd.onion/optimumfirst.comLink 2http://zvacnemrrluposfmwgp4bqvb34ipoorgh7yyqoozu6gcmh5z32wjgsad.onion/optimumfirst.comOptimum First Mortgage provides mortgage solutions, in
OffSet7 / Dark Web / blacknevas
Optimum First Mortgage (Pear's acting group's promotional blog) listed by blacknevas ransomware group
- Group
- blacknevas
- Sector
- Financial Services
- First seen
- 16 September 2026
This is a claim published by the threat group itself and has not been independently verified. OffSet7 does not host or link to any leaked data.
Monitor your company and suppliers
Get an alert the moment a ransomware group names your company or one of your suppliers.