Skip to content
Ransomware

Ace Ethanol listed on Akira ransomware leak site

The Akira ransomware group has listed Ace Ethanol on its leak site, claiming to possess 15 GB of corporate data.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Akira
  • Country: United States
  • Sector: Energy & Utilities
  • Announcement date: February 27, 2026

Akira ransomware group claims attack on Ace Ethanol

The Akira ransomware group has officially listed the energy company Ace Ethanol on its dedicated leak site. According to the announcement, the threat actor group claims to have successfully targeted the organization and asserts that they are in possession of a significant volume of corporate data. The group has indicated that they intend to release the stolen information shortly, marking a potential escalation in their campaign against the entity.

The announcement regarding this incident was published on February 27, 2026. The group claims that the attack took place on the same day the announcement was made. While the group has made these claims publicly, information regarding the specific operations and background of the Akira group remains limited. This group utilizes a method often referred to as double extortion, where attackers not only encrypt an organization's systems but also threaten to leak sensitive data to increase the pressure on the victim to pay a ransom.

Details of the claimed data theft

The Akira group has claimed to have exfiltrated approximately 15 GB of data from Ace Ethanol. While the group has not provided any screenshots to verify the contents of the stolen files, the announcement specifies several categories of sensitive information that are allegedly included in the breach. The breadth of the claimed data suggests a significant compromise of both administrative and operational information.

The specific types of data mentioned in the claim include:

  • Employee SSNs
  • W9 forms
  • Financial records
  • HR files
  • Chemical recipes
  • Partner documents

The inclusion of such diverse data types—ranging from highly personal employee identifiers to proprietary industrial formulations—highlights the potential impact of the alleged breach on the organization's internal and external operations.

About Ace Ethanol

Ace Ethanol is an energy company operating within the United States. The organization serves as a marketing resource for corn producers located in northwestern Wisconsin. Its primary business focus involves the production and distribution of ethanol, dried distillers grains, and corn oil.

Implications and industry considerations

The sensitivity of the data alleged to have been stolen by the Akira group presents several significant risks. The claim that employee Social Security Numbers (SSNs) and W9 forms were taken suggests a high risk of identity theft for the affected staff members. Furthermore, the alleged exposure of financial records, HR files, and partner documents could compromise the organization's competitive advantage and create vulnerabilities within its supply chain security.

Because Ace Ethanol is based in the United States, the situation may trigger various state-level data breach notification laws and bring the incident under the oversight of relevant regulatory bodies. The use of double extortion by the Akira group is a common tactic designed to exert maximum pressure on an organization by leveraging the threat of public data exposure.

In the energy and utilities sector, maintaining the integrity of technical specifications and chemical recipes is critical for operational security. When organizations face such threats, common defensive strategies often include implementing robust multi-factor authentication, maintaining offline backups, and conducting regular security awareness training. Given the potential for regulatory scrutiny and the risk to intellectual property, organizations in this sector must remain vigilant against the evolving tactics used by ransomware groups to target critical infrastructure and their supply chains.

From the Essential plan

Third-Party Risk

Monitor leaks on your suppliers’ domains and identify at-risk suppliers at an early stage.

Related stories