b2motorsport.co.il Listed by tengu Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

B2 Motorsport, operating as b2motorsport.co.il, was listed on January 29, 2026, by the ransomware group tengu. The listing states that internal files were exfiltrated during a ransomware attack. No figure for the number of individuals affected has been reported, and the company has not issued a public statement confirming or denying the claims.

Breaking down the breach

The only confirmed detail is the group’s listing of the domain on its leak site. The reported summary describes the incident as a ransomware attack that resulted in the exfiltration of internal files. No information has been released about the date of the intrusion, the volume of data taken, the encryption status of systems, or whether a ransom demand was issued or met. The scale of exposure therefore remains undisclosed.

Inside tengu

Tengu is a ransomware operation that maintains a public leak site where it lists organizations it claims to have compromised. The group’s pattern involves encrypting victim systems and threatening to publish stolen files if payment is not received. Its listings are presented by the group itself; independent verification of each claim is not always available at the time of posting. Tengu has appeared in public reporting on multiple incidents involving commercial targets, though the precise tactics used against any single victim are rarely detailed beyond the initial announcement.

Who is b2motorsport.co.il?

B2 Motorsport is an Israeli workshop that provides performance modifications, tuning services, and spare parts for cars and motorcycles, with a focus on BMW and MINI models. Organizations of this type routinely collect customer contact details, vehicle registration information, service records, and payment data in the course of business. A breach at such a firm can therefore touch both operational documents and records that identify individual clients.

What was likely exposed

The listing refers only to “internal files.” No inventory of specific data categories has been published. Organizations in the automotive modification sector commonly store customer names, addresses, vehicle identification numbers, service histories, and financial transaction records. Until the company or investigators release a confirmed list, the exact contents of the exfiltrated material cannot be stated as fact.

What's at stake

For individuals whose information appears in the files, the primary concerns are misuse of contact details for targeted phishing and the potential exposure of vehicle or financial records that could support identity fraud. For the company, the incident may affect customer trust and require technical remediation and regulatory notifications, depending on the jurisdictions involved. Both outcomes depend on the actual contents of the files, which remain unconfirmed.

Were you affected?

Begin by monitoring official statements from b2motorsport.co.il and any notices required under Israeli data-protection rules. If you have been a customer, consider changing passwords on any accounts that used the same credentials and enabling multi-factor authentication where available.

• Review bank and credit-card statements for unusual activity.
• Request a copy of your personal data from the company if you believe it was stored there.
• Run a free exposure scan of your email address against known breach datasets to check for prior appearances of your information.

AICompiled with AI assistance from public sources and published under our editorial standards.