Ransom! Apache OpenOffice

The threat actor akira has claimed to imminently upload 23GB of sensitive corporate documents belonging to Apache OpenOffice, including employee and financial information, internal confidential files, and application-related reports. The targeted victim is based in the United States. #UnitedStates

Incident Details

  • Victim: Apache OpenOffice
  • Country: US
  • Actor: akira
  • Source: https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion/#apacheopenoffice
  • Discovered: 2025-10-30 12:15:54.821930
  • Published: 2025-10-30 00:00:00.000000

Information

  • Apache OpenOffice is an open-source office productivity software suite developed by the Apache Software Foundation.
  • The software is a successor project of OpenOffice.org, which itself succeeded StarOffice.
  • The victim plans to upload 23GB of corporate documents soon.
  • The documents include employee information such as addresses, phones, dates of birth, driver licenses, social security cards, and credit card details.
  • The data also contains financial information and internal confidential files.
  • The collection includes numerous reports about issues with the application.

Disclaimer: This post is based on public claims made by the ransomware group "akira". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live