Akira Ransomware Strikes Apache OpenOffice, Allegedly Exfiltrates 23GB of Data

The Akira ransomware gang announced on 29 October 2025 that it had breached the systems of Apache OpenOffice and allegedly exfiltrated 23GB of sensitive corporate data. The group posted details on its dark web leak site and threatened to publish the stolen information unless a ransom was paid.

According to Akira ransomware gang, the stolen data includes highly personal employee records such as addresses, phone numbers, dates of birth, driver’s licences, Social Security numbers and credit card details, along with financial records, internal confidential documents, and extensive development reports. The incident marks a notable escalation for open‑source projects and has raised concerns about the security posture of organisations serving millions of users worldwide.

As of 1 November 2025, the Apache Software Foundation had not confirmed or denied the breach, with no immediate comment from spokespeople, and independent verification of the data remained elusive.