In February 2024, the ransomware claim targeted industry.airliquide.kr in South Korea, with the threat actor safepay alleging access to systems used by Air Liquide, a longtime provider of essential gases and related technologies to major industries. Air Liquide has operated in South Korea for several decades, and the incident is reported to impact #SouthKorea
Incident Details
- Victim: industry.airliquide.kr
- Sector: Manufacturing
- Country: KR
- Actor: safepay
- Source: http://safepaypfxntwixwjrlcscft433ggemlhgkkdupi2ynhtcmvdgubmoyd.onion/blog/post/industryairliquidekr/
- Discovered: 2026-08-25T20:57:25.789152+00:00
- Published: 2026-08-25T20:57:09.561479+00:00
Information
- Air Liquide has operated in South Korea for several decades and supplies essential gases and related technologies to major industries.
Disclaimer: This post is based on public claims made by the ransomware group "safepay". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.