Barnes & Jones Listed by dragonforce Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

What is known is that Barnes & Jones, a long-established engineering firm, was listed by the ransomware group dragonforce on or around December 27, 2025. The listing states that internal files were taken during a ransomware incident. The number of individuals whose information may be involved remains undisclosed, as does any confirmation that the data has been published or used. This matters because even limited exposure of internal records from a firm that has operated for more than a century can affect clients, employees, and business partners whose details appear in project files, contracts, or administrative systems.

What happened

The incident was reported on December 27, 2025, when dragonforce listed Barnes & Jones on its leak site. The group claims internal files were exfiltrated during a ransomware attack. No further details on the timing of the intrusion, the volume of data taken, or the method of access have been made public. The number of people affected is also unknown.

The group behind it: dragonforce

Dragonforce is a ransomware operation that maintains a public leak site where it lists organizations it claims to have targeted. Like other groups of its kind, it typically seeks to encrypt systems and, when possible, copy data before demanding payment. Its listings are presented by the group itself and are not independently verified in every case. Public reporting on the actor has documented similar activity against other organizations in prior incidents, though specifics tied to this listing remain limited to the claim on the site.

Barnes & Jones and its sector

Barnes & Jones was established before 1900 by engineers Walter Barnes and Bill Jones. The firm specialized in the design of two-pipe steam heating systems for commercial buildings in cities including Boston, New York, and Chicago. Organizations in this sector routinely maintain records related to engineering projects, client specifications, equipment layouts, and operational correspondence spanning many decades.

What was likely exposed

The only detail provided is that internal files were allegedly exfiltrated. The precise contents of those files have not been disclosed. Companies of this type commonly hold project documentation, client contact information, employee records, and technical drawings. Without confirmation from the organization or investigators, the exact categories of data involved cannot be stated as fact.

The real-world impact

Exposed internal files can contain details that allow targeted follow-on contact with clients or staff, or that reveal operational information about older building systems. For the organization, the incident adds administrative and potential legal costs while it assesses what was taken. Individuals named in the files face the ordinary risks associated with any leak of business records: increased chance of unsolicited contact or attempts to misuse whatever identifiers are present.

What to do if you're exposed

Monitor accounts for unusual activity and consider placing fraud alerts with credit agencies if personal identifiers appear to be involved. Review any communications from Barnes & Jones for guidance on next steps. Readers can also run a free exposure scan of their email address against known breach data to check for prior appearances in other incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.