SafePay Ransomware Claims Air Liquide Korea

Ransomware · Aug 25, 2026
Summary

The SafePay ransomware group listed industry.airliquide.kr, the Korean industrial-gases arm of Air Liquide, on its leak site on 25 August 2026. Air Liquide Korea supplies essential gases to major South Korean industries including semiconductor manufacturing; SafePay operates a double-extortion model and had claimed over 530 victims globally by August 2026.

Attribution
SafePay ransomware group
Where
KR South Korea
Sectors: manufacturing, chemicals, industrial gases
EU relevance
Medium
Hit manufacturing in South Korea, where the EU has Trade & Investment projects
Graded by rules: EU member states affected, EU response, EU sanctions, EU projects in the sector hit.