Optimum First Mortgage Hit by Ransomware Attack, Exposing Sensitive Borrower Data
On June 19, 2026, mortgage lender Optimum First Mortgage disclosed a ransomware attack carried out by the cybercriminal group "Pear." The threat actors claimed responsibility and demanded payment to prevent the leak of stolen data. The breach was detected around the same date, prompting an investigation by the company.
The compromised data includes highly sensitive information from mortgage applications, such as Social Security numbers, bank account details, tax records, employment history, and income data. Individuals who received a breach notification from Optimum First Mortgage may face heightened risks of identity theft and fraud.
National class action law firm Edelson Lechtzin LLP has launched an investigation into potential legal claims on behalf of affected individuals, offering free case evaluations to determine eligibility for a class action lawsuit. The firm specializes in data privacy litigation and is based in Pennsylvania and California.
Optimum First Mortgage provides home purchase and refinance loans, and the incident underscores the growing threat of ransomware attacks targeting financial institutions. No further details on the attack’s scope or response have been disclosed.
Optimum First Mortgage cybersecurity rating report: https://www.rankiteo.com/company/optimumfirstmortgage
"id": "OPT1782181652",
"linkid": "optimumfirstmortgage",
"type": "Ransomware",
"date": "6/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Financial Services',
'name': 'Optimum First Mortgage',
'type': 'Mortgage lender'}],
'customer_advisories': 'Breach notifications sent to affected individuals',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Social Security '
'numbers, bank account '
'details, tax records, '
'employment history, '
'income data',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Mortgage application data'},
'date_detected': '2026-06-19',
'date_publicly_disclosed': '2026-06-19',
'description': 'On June 19, 2026, mortgage lender Optimum First Mortgage '
'disclosed a ransomware attack carried out by the '
"cybercriminal group 'Pear.' The threat actors claimed "
'responsibility and demanded payment to prevent the leak of '
'stolen data. The breach was detected around the same date, '
'prompting an investigation by the company. The compromised '
'data includes highly sensitive information from mortgage '
'applications, such as Social Security numbers, bank account '
'details, tax records, employment history, and income data. '
'Individuals who received a breach notification may face '
'heightened risks of identity theft and fraud.',
'impact': {'brand_reputation_impact': 'Potential reputational damage due to '
'data exposure',
'data_compromised': 'Social Security numbers, bank account '
'details, tax records, employment history, '
'income data',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action lawsuit',
'payment_information_risk': 'High'},
'investigation_status': 'Ongoing',
'motivation': 'Financial gain',
'ransomware': {'data_exfiltration': 'Yes', 'ransom_demanded': 'Yes'},
'references': [{'source': 'Edelson Lechtzin LLP'}],
'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit '
'(Edelson Lechtzin LLP)'},
'response': {'communication_strategy': 'Public disclosure and breach '
'notifications'},
'threat_actor': 'Pear',
'title': 'Optimum First Mortgage Hit by Ransomware Attack, Exposing Sensitive '
'Borrower Data',
'type': 'Ransomware'}