Barnes & Jones

Barnes & Jones was compromised in a ransomware attack attributed to dragonforce in December 2025. The organization, operating in the Manufacturing sector in United States, was added to the group's data leak site as part of an extortion campaign.

dragonforce operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Barnes & Jones was founded before the turn of the century by two engineers: Walter Barnes, a graduate of The Massachusetts Institute of Technology, and Bill Jones, a graduate of The Worcester Polytechnic Institute. Around 1897, the two joined forces to design and layout two-pipe steam heating systems for new commercial construction projects throughout Boston, New York City and Chicago. By applying their engineering expertise, the partners built a strong reputation for designing quiet, trouble free and efficient steam heating systems. Because most steam traps of the day were inherently inefficient and problematic, Barnes and Jones focused their talents to develop a more efficient and reliable steam trap. In 1902, Barnes & Jones introduced their first line of balanced-pressured thermostatic steam traps to improve overall system performance.

Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2025-5777, which may have been leveraged as initial access vectors or for lateral movement.