Akira Ransomware Hits Apache OpenOffice – 23GB Data Exfiltration Claimed

Akira ransomware gang claims to have breached Apache OpenOffice infrastructure and exfiltrated 23GB of data. The attack allegedly targeted the open-source office suite project's internal systems, potentially compromising development infrastructure, user data, or contributor information. What's notable: Apache OpenOffice is a widely-deployed productivity suite with millions of users across enterprises and government organizations, making any compromise a potential supply chain risk if build systems or update mechanisms were accessed. Akira has been consistently active throughout 2025, targeting mid-to-large enterprises with double extortion tactics—encrypting systems while simultaneously exfiltrating sensitive data for leverage. The group typically gains initial access through VPN vulnerabilities, phishing, or exposed RDP services, then moves laterally using legitimate admin tools to avoid detection. If the OpenOffice breach is confirmed, it would represent a shift toward targeting open-source infrastructure rather than purely commercial entities. The 23GB data claim suggests Akira grabbed internal communications, development documents, or potentially contributor/user databases. Apache has not yet issued a public statement confirming or denying the incident.