tengu ransomware group lists b2motorsport.co.il on its leak site

• Ransomware group: tengu
• Country: Israel
• Sector: Retail & E-Commerce
• Announcement date: January 29, 2026

The threat actor known as tengu has listed the Israeli organization b2motorsport.co.il on its dedicated leak site. According to the announcement made on January 29, 2026, the group claims to have successfully breached the systems of the company, marking a potential data exposure incident for the retail and e-commerce entity.

The claims made by tengu

The group known as tengu alleges that they have gained unauthorized access to the internal systems of b2motorsport.co.il. In a notable escalation of their claims, the threat actor asserts that the company's IT department has attempted to conceal the incident from relevant parties. This allegation is a common tactic used by ransomware groups to pressure victims into compliance by suggesting that a breach is already well underway or has been successfully hidden.

The announcement serves as a warning to the organization, stating that the group may proceed to release confidential data and project documents. This type of threat is characteristic of double extortion tactics, where attackers not only encrypt data to disrupt operations but also threaten to publish sensitive information to damage the victim's reputation or force payment.

Data involved in the alleged breach

Regarding the specific contents of the alleged leak, the information provided by the threat actor remains limited. While the announcement includes a screenshot that provides general information about the company's business operations, it does not specify the exact nature of the stolen files. The listing names no specific data types or file formats that have been compromised.

At this stage, there is no information available regarding the total volume of data stolen or the specific number of files involved. Furthermore, the group has not disclosed a ransom demand or a specific timeline for the data release beyond the initial announcement. The lack of specific details regarding the stolen assets is a common occurrence in the early stages of a leak site listing.

About b2 motorsport

B2 Motorsport is an Israeli-based automotive workshop that specializes in high-performance modification services. The company provides technical improvement solutions for a variety of vehicles, including both cars and motorcycles. Their service offerings include the provision of spare parts and specialized modifications for high-end brands such as BMW and MINI.

Implications and defensive considerations

This incident suggests that the company may face a significant risk regarding the exposure of its operational and customer data. Because the organization is based in Israel, any confirmed data breach may be subject to local data protection regulations, which may require specific reporting and compliance measures. The potential publication of sensitive information could harm the company's commercial reputation and could potentially be used to facilitate phishing attacks against its customer base.

In the broader context of cyber threats, ransomware leak sites serve as a platform for extortion. When an organization is targeted, the threat of data exposure can create significant legal and operational pressure. For companies in the retail and automotive sectors, maintaining robust security posture is essential to protect proprietary project documents and client information.

As a general defensive measure, organizations facing such claims may need to initiate internal audit processes to verify the validity of the leak. This involves investigating system logs, checking for unauthorized access, and confirming whether any sensitive data has indeed been exfiltrated. Additionally, informing affected parties is a critical step in managing the fallout of a potential breach. Given that public information regarding the tengu group is currently limited, organizations should remain vigilant against evolving tactics used by such actors.