Top Aces

Top Aces is a Canadian defence contractor that concentrates on providing fighter jet training services to a range of national armed forces. The firm is headquartered in Canada and designs its training programmes to prepare pilots for the challenges posed by adversarial threats in modern air combat. Its customers consist of multiple military organisations that depend on the company’s expertise to sustain pilot readiness and operational effectiveness. By focusing exclusively on the instruction of fighter jet crews, Top Aces occupies a specialised niche within the broader defence industrial base. The training it delivers is integrated into the official curricula of the air forces it supports, helping to develop the tactical proficiency and mission‑ready status of aircrew. As a contractor that works directly with national defence establishments, the company operates under the regulatory frameworks that govern defence procurement and export controls in its home jurisdiction. Its role is to translate operational requirements into practical flight instruction, thereby contributing to the overall capability of the partner air forces.

In May 2022, Top Aces was subjected to a ransomware attack carried out by the LockBit group, which announced that it had extracted 44 GB of data from the company’s systems and threatened to publish the information unless its demands were satisfied. LockBit is recognised as a prolific ransomware operation that has previously directed similar attacks against other entities within the defence industrial base. The incident prompted concerns that the compromised data could include sensitive defence‑related material, especially given Top Aces’ function in supplying training that prepares pilots to counter adversarial threats and its contractual relationships with various military organisations. The event highlighted how supply‑chain linkages between defence contractors and their military clients can create points of exposure for cyber‑threat actors. It also drew attention to the importance of robust cybersecurity measures for organisations that handle training‑related data, which may encompass flight schedules, performance metrics, and proprietary instructional content. While public sources do not disclose the final resolution of the extortion attempt, the attack remains a concrete illustration of the cyber risks confronting firms that support national military capabilities.