SafePay Claims Access to Air Liquide Systems in South Korea

Summary
A ransomware.live entry attributes to SafePay an unconfirmed claim of access to systems associated with Air Liquide in South Korea. The record identifies industry[.]airliquide[.]kr as the victim.
Key points
- The monitoring entry names Air Liquide and industry[.]airliquide[.]kr as the victim.
- The entry attributes the access claim to the ransomware actor SafePay.
- The post says the claim targeted the victim in February 2024; the record lists discovery and publication on August 25, 2026.
- The article says it cannot confirm the claim's accuracy.
Article Details
- Victim
- Air Liquide
- Victim Domain
- industry.airliquide.kr
- Encryption Status
- Unknown
- Encrypted Size
- Unknown
- Exfiltration Status
- Unknown
- Exfiltrated Data
- Not disclosed
- Exfiltrated Size
- Unknown
- Ransom Demand
- None reported
- Leak Status
- A claim was posted on the safepay blog; publication of victim data is not reported.
