b2motorsport.co.il Listed by tengu Ransomware Group

On January 29, 2026, the Israeli automotive performance company B2 Motorsport (also known as B2M) appeared on the leak site of the tengu Ransomware Group. The attackers exfiltrated internal files during a ransomware incident and listed the company publicly after it apparently declined to pay. While the exact number of people whose information may have been exposed remains unknown, anyone who has purchased performance parts, booked tuning services, or shared documents with B2M could be affected.

What Public Reporting Shows

Public reporting indicates that B2 Motorsport, an Israeli workshop specializing in high-performance modifications for BMW, MINI, and motorcycles, had internal files stolen. The tengu Ransomware Group posted evidence of the breach on its leak site on January 29, 2026. Available reporting describes the data as internal company files; the precise volume and specific records have not been independently verified. No customer count has been released, and it is not yet clear whether names, contact details, payment records, or vehicle identification numbers were included.

Why This Matters for You and Your Family

When a business you deal with loses control of its files, your personal information can end up in the hands of criminals. If you have ever emailed B2M a copy of your driver’s license, shared billing addresses, or paid for parts and services, those details may now be available to attackers. For families this can mean sudden spam, targeted phishing texts, or attempts to impersonate you to access bank accounts or vehicle registrations. Even if you are not a direct customer, shared family vehicles or joint purchases can pull your spouse’s or children’s information into the same dataset.

Credential leaks from incidents like this frequently cascade into gaming accounts, especially when family members reuse email addresses or passwords across hobbies and work.

The Doxxing and Identity-Chain Implications

Ransomware groups rarely stop at one company’s files. Once internal documents surface, attackers and opportunistic criminals begin linking disparate pieces of data. An email address found in B2M’s records can be cross-referenced with forum usernames, social-media handles, and children’s gaming accounts. This creates an identity chain that leads from a simple car-parts purchase to a full picture of your household. Public reporting shows these chains are then sold or used for doxxing, swatting, or extortion. Gaming accounts belonging to teenagers are particularly vulnerable because they often share the same email domain or password patterns as adult accounts tied to the family address.

Tengu Ransomware Group’s Known Track Record

Public reporting attributes the attack to the tengu Ransomware Group. The group emerged in late 2024 and has targeted organizations across multiple countries with a classic double-extortion playbook: encrypt victim systems, exfiltrate sensitive files, then threaten to publish the data unless a ransom is paid. Notable prior victims include smaller manufacturing and service firms whose internal documents contained customer contracts and personal records. Their typical approach involves initial access through phishing or unpatched remote desktop services, followed by rapid exfiltration and a public countdown on their leak site when payment is refused.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by specialists.
• Rotate any password you ever used at B2 Motorsport anywhere it is reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that chain back to the same address or email.
• Let remediation specialists perform hands-on takedown requests across data brokers and leak sites on your behalf.

The incident underscores that a single vendor breach can quietly expose your family for months or years unless you actively hunt down the connections. Start your DoxxScan trial today and put continuous monitoring, identity-chain mapping, and specialist remediation to work for your household—including every gaming account that could become the next link in a doxxing chain.