Carrera Casting Corp. targeted in alleged data breach by blacknevas

• Ransomware group: blacknevas
• Country: United States
• Sector: Manufacturing
• Announcement date: April 30, 2026

The threat actor known as blacknevas has listed a significant amount of data, allegedly belonging to the New York-based jewelry manufacturer Carrera Casting Corp., on its leak site. The announcement, made on April 30, 2026, claims that the stolen information is linked to the company's internal operations and administrative processes.

The alleged data leak event

According to the announcement posted by the blacknevas group, the breach is claimed to have occurred on March 21, 2026. The group asserts that they have obtained a massive volume of data, specifically claiming a total size of 3 TB. This data is purportedly comprised of various files that are integral to the company's daily business functions and administrative management.

While the group has made this claim publicly on their platform, information regarding the specific identity, methods, or background of the blacknevas group remains limited. In many modern cyberattacks, threat actors utilize leak sites to pressure organizations through a tactic known as double extortion. In such scenarios, attackers not only encrypt a company's systems to disrupt operations but also steal sensitive data, threatening to release it publicly if a ransom is not paid. This creates a dual pressure point: the immediate need to restore operational capacity and the long-term need to protect intellectual property and reputation.

Details of the allegedly compromised data

The content of the alleged leak, as suggested by available screenshots, is extensive and covers multiple departments within the organization. The data is said to include a wide variety of sensitive files that could impact various business sectors. The specific types of data identified in the listing include:

• Office documents
• Administrative records
• Factory production data
• Design department files
• Accounting records
• User data
• Invoices
• Printing department files

The presence of such a diverse range of files suggests that the attackers may have gained access to various segments of the corporate network, moving from general administrative systems to specialized production and design environments.

About Carrera Casting Corp.

Carrera Casting Corp. is a jewelry manufacturing company based in New York City. The organization provides specialized services for jewelry designers, brands, and retailers, including precious metal casting, 3D printing, CAD design, and mold-making services.

Potential impact and industry risks

The exposure of the allegedly leaked data may pose a significant risk to the company's trade secrets and customer information. Specifically, the exposure of design and production data could harm the company's competitive advantage and compromise its intellectual property rights. For a manufacturing firm that relies on specialized CAD designs and proprietary production processes, the loss of such information is a critical threat to its market position.

Furthermore, as a United States-based entity, this incident may trigger legal processes under state laws and potential data privacy regulations. The presence of financial data and user information within the leak may also lead to secondary risks, such as identity theft or targeted phishing attacks against employees and customers. When attackers possess invoices and accounting records, they gain the ability to craft highly convincing social engineering attacks against the company's business partners or financial institutions.

Organizations operating in the manufacturing and design sectors can take several defensive steps to mitigate these risks. Implementing robust access controls and the principle of least privilege can help ensure that sensitive design and production files are only accessible to authorized personnel. Regular backups, stored offline or in immutable environments, are essential for recovering from encryption-based attacks. Additionally, monitoring for unauthorized data exfiltration and employing multi-factor authentication across all administrative and user accounts can serve as vital layers of defense against the types of access required to facilitate such large-scale data theft.