Ransomware ‘Fakeout’? Apache OpenOffice Disputes Akira’s 23GB Data Theft Claim
The Apache OpenOffice project has come under public scrutiny following claims by the Akira ransomware group, which alleged a cyberattack resulting in the theft of 23 gigabytes of internal data. However, the organization overseeing the development of the office suite disputes the credibility of these assertions, citing the absence of any evidence of a breach and clear inconsistencies with the project’s actual structure.
Information about the alleged attack surfaced on October 30 on Akira’s leak site. The attackers claimed to have gained access to internal reports, financial records, and personal information—including addresses, phone numbers, driver’s licenses, Social Security numbers, and even banking details. According to them, the stolen data extended beyond corporate materials and supposedly included details about the software’s internal issues.
Representatives of the Apache Software Foundation expressed strong doubts about the authenticity of these claims. They noted that there is no sensitive data within their possession that could have been stolen, since the OpenOffice project is developed and maintained entirely by volunteers, none of whom are employees of the Foundation. The project has no paid positions, meaning that personnel or accounting data simply do not exist. Development is conducted publicly through open mailing lists, and all discussions and issue reports are freely accessible to anyone.
They also emphasized that no ransom demands had been received and that no signs of infrastructure compromise had been detected. The Foundation clarified that, as of the time of review, it had not contacted law enforcement or external cybersecurity specialists, as there was no cause to believe an incident had occurred.
Despite the hackers’ statements, the Akira group has yet to publish any evidence substantiating their claims. As of early November, no materials allegedly obtained from the attack have appeared in the public domain.
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.