01
Sector Outlook
Expected ransomware victims in your sector over the next 30 days, with a range.
LabsLabs · early accessOffsys Signals
From what happened to what's likely next.
Offsys Signals turns years of leak-site history into forward-looking signals. Every signal carries a range, and every month we publish how our past signals scored.
Weekly victims in one sector, with a 4-week outlook
Fictional exampleSignals
Six ways to see what's coming.
02
Targeting Shift
“Gang X moved into Indian manufacturing this month.” See which sectors gangs are pivoting toward.
Labs03
Leak-to-Dump Countdown
How long a gang usually waits before publishing stolen data. Plan your response window.
Labs04
Exploit-to-Ransomware Lead Time
How fast ransomware follows a newly exploited CVE: your patch window.
Roadmap05
Gang Exit & Rebrand Signals
Signs a group is about to vanish or rename. Track continuity across rebrands.
Roadmap06
Repeat-Victim Risk
Likelihood a past victim is hit again. Historical patterns that indicate elevated risk.
RoadmapSee who's shifting toward your sector.
When a tracked group starts listing more victims in your industry than before, you see it in the Targeting Shift signal — before your sector makes the news.
LabsFictional example
A tracked group shifted toward Indian financial services. The growing segment glows.
Our promise
We show our homework.
Every forecast has a range. Every month we publish a public scorecard: what we forecast, what happened. If a signal doesn't beat a simple baseline, we don't ship it.
PUBLIC SCORECARDJanuary 2027
First scorecard publishes January 2027. We'll show every forecast we made, the actual outcome, and how the model performed against a naive baseline.
Honest limits.
Leak sites show victims who didn't pay, from groups that run leak sites. We forecast patterns and timing — not “which company is next.”
All signal data shown on this page is fictional and for illustration only.