Carrera Casting
bd_6022c273d85cc7ad · schema v1 · pii pii-v1
Full breach record for Carrera Casting →3 incidents on fileThreat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Blacknevas on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
• 3 terabytes of corporate data for free. Download it now while it's still available.• Please wait 2 -3 days while files are uploaded to the site.• Brief Overview of Carrera Casting• Carrera Casting is one of the premier jewelry manufacturing and casting companies, located in the heart of New York City. It provides a full range of services for jewelry designers, brands, and retailers.• Core Activities:• Precious Metal Casting: Working with gold of various karats and colors, silver, platinum, and palladium.• 3D Printing and CAD: Converting digital 3D models (CAD) into high-precision wax or resin prototypes for subsequent casting.• Mold Making: Creating high-quality rubber and silicone molds for jewelry mass production and reproduction.• Finishing and Preparation: Basic processing and finishing of cast pieces prior to final polishing and stone setting.• Company Features:• The company is known for its strict quality control, commitment to client design confidentiality, and use of cutting-edge technologies. It is a reliable partner for both emerging independent jewelers and major global brands, offering scalable solutions for jewelry manufacturing.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Mar 21, 2026
Claim posted
—
No filing yet · watching
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
No regulatory filing corroborates this yet — it is the attacker's own assertion. Watch this entity to be notified the moment a filing corroborates or contradicts it.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
blacknevas
According to ransomware.live, BlackNevas is a ransomware group first observed in November 2024, believed to be derived from the Trigona ransomware family, targeting telecommunications, manufacturing, medical, and legal industries primarily in Asia-Pacific, the UK, Italy, and Lithuania using double-extortion with a dual AES/RSA encryption scheme.