Delphi Labs Ventures  /  MINDWISE

Attributing the point of compromise.

MINDWISE is the first Delphi Labs venture. Since 2016, we have monitored dark-web carder marketplaces and applied statistical attribution to map stolen-card dumps back to the merchant that was actually breached — closing the loop between the underground economy and the businesses that have to respond to it.

Status · Live in production Domain · Dark-web threat intelligence Founded · 2016

Credited by Krebs On Security for the Jason's Deli attribution.

In December 2017, a fresh batch of stolen payment cards branded "Blasttt-US" appeared on the carder marketplace Joker's Stash. MINDWISE pulled the dump, geolocated the issuing ZIPs, and found a near-100% overlap with the ZIP codes of Jason's Deli locations. The conclusion: at least 170,000 cards on sale that week mapped back to a single restaurant chain that had not yet publicly confirmed a breach.

That attribution was independently checked and credited by Brian Krebs in "4 Years After Target, the Little Guy is the Target" on Krebs On Security — the reference desk of record for breach journalism.

That is the proof that matters in this discipline: not a leaderboard score, but a working system attributing patient zero inside a live adversarial market, on a clock, with the underlying math holding up to outside scrutiny.

Dark-web intelligence, statistically attributed.

Marketplace monitoring

Pull what's actually being sold.

Continuous collection from dark-web carder shops and breach forums — normalized, deduplicated, and stamped with the provenance needed to make a downstream claim defensible.

Statistical attribution

Map a dump back to its merchant.

ZIP-code overlap, issuer mix, BIN distribution, and timing correlation collapse a dump of stolen cards into a small set of candidate breach origins — with a confidence band, not a headline.

Adversarial robustness

Built for opponents that move.

Carder markets rotate, rebrand, and salt their listings. MINDWISE treats drift as the default condition — collection, features, and attribution logic are designed under the assumption the other side is adapting.

Eight years of production, not a pitch deck.

MINDWISE has run continuously in production since 2016. That tenure shapes how we build everything at Delphi Labs: predictions are calibrated, attributed to the features that drove them, and monitored for drift the moment they hit reality.

Customers, current deployments, live performance numbers, and the founder's own voice on how this was built live where they belong — on the MINDWISE product site ↗.

See MINDWISE in detail.

Numbers, customers, integrations, and a request for evaluation access live on the product site.