Attorneys at Almeida Law Group are investigating whether a class action lawsuit can be filed on behalf of individuals affected by a possible American Casting Company data breach. According to dark web monitoring sources, a hacker group calling itself Storm claimed responsibility for a cyberattack on American Casting Company in a post first observed in September 2026, alleging it had gained access to internal company systems. As of this writing, American Casting Company has not issued a public confirmation of the incident, and the exact scope of any exposed data remains unknown. If you believe you were affected, contact Almeida Law Group.
About American Casting Company
American Casting Company is an ISO 9001 and AS9100 certified investment casting foundry founded in 1974 and headquartered at 205 Apollo Way, Suite A, Hollister, California. The company specializes in investment castings for the aerospace, medical, and defense industries, working with materials such as super alloys, nickel-based superalloys, cobalt-based alloys, and stainless steels. It serves clients across a range of sectors, including oil and gas, food processing, marine, mining, and electronics, and employs an estimated 51 to 200 people.
What Happened?
American Casting Company was listed in a ransomware leak-site allegation reported by Ransomware.live. On September 18th, 2026, the ransomware group known as Storm — tracked by Microsoft as Storm-1175 — posted a claim against the company on a dark web leak site. This is an attacker-side allegation only. No independent corroborating source has confirmed the claim, no breach notification has been filed with the California Attorney General, and American Casting Company has not publicly acknowledged the incident. No specific data types, data volume, or ransom demand have been disclosed in connection with this claim.
The Storm ransomware group (Storm-1175) is an active, financially motivated threat actor tracked by Microsoft and assessed as likely operating from a UTC+8 timezone. The group was previously associated with Medusa ransomware and has been deploying a custom C++-based payload called StormEncryptor since approximately August 2026. Researchers have observed Storm-1175 exploiting CVE-2026-18577, an authentication-bypass vulnerability in N-able N-central remote monitoring and management software, to gain initial access to victim networks. Whether that or any other specific attack vector was used against American Casting Company — if an attack occurred at all — is not known.
Key Facts at a Glance
- Company or Organization: American Casting Company
- Industry: Manufacturing — Investment Casting Foundry (Aerospace, Medical, Defense)
- Location: Hollister, California
- Incident type: Ransomware claim (unverified, attacker-side allegation)
- Source: Ransomware.live — Victim: American Casting Company; GBHackers — Storm-1175 Launches StormEncryptor Ransomware Attacks; Femtosec — Storm Ransomware Targets Exposed RMM Infrastructure
What Should You Do?
Even though this incident has not been confirmed by American Casting Company, if you are a current or former employee or otherwise believe your personal information may be held by the company, it is a good idea to take precautionary steps now. You can place a free fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent unauthorized accounts from being opened in your name. Review your credit reports at AnnualCreditReport.com and monitor your existing financial accounts for any suspicious activity. If you become a victim of identity theft or fraud, report it and get a personal recovery plan at IdentityTheft.gov.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
