diff --git a/src/requirements/production.txt b/src/requirements/production.txt
index d3de5c672..b62bc2df4 100644
--- a/src/requirements/production.txt
+++ b/src/requirements/production.txt
@@ -37,7 +37,7 @@ babel
 django-i18nfield>=1.4.0
 django-hijack>=2.1.10,<2.2.0
 jsonschema
-openpyxl==3.0.*
+openpyxl==2.6.*  # Bump to 3.0 after python 3.5 is dropped
 django-oauth-toolkit==1.2.*
 oauthlib==3.1.*
 django-jsonfallback>=2.1.2
diff --git a/src/setup.py b/src/setup.py
index 90ce17669..35faf974e 100644
--- a/src/setup.py
+++ b/src/setup.py
@@ -143,7 +143,7 @@ setup(
         'django-localflavor',
         'jsonschema',
         'django-hijack>=2.1.10,<2.2.0',
-        'openpyxl==3.0.*',
+        'openpyxl==2.6.*',
         'django-oauth-toolkit==1.2.*',
         'oauthlib==3.1.*',
         'urllib3==1.24.*',  # required by current requests