diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 9ec4fae..3065294 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -16615,6 +16615,21 @@
       },
       "uuid": "f0a50fa0-25ca-4346-a666-390923f2c5a1",
       "value": "IRLeaks"
+    },
+    {
+      "description": "RaHDit is a pro-Kremlin hacktivist group known for orchestrating hack-and-leak operations, including the publication of personal information about Ukrainian military intelligence personnel and their associates. The group has been linked to Russian intelligence and has claimed to provide actionable intelligence to the Russian army. RaHDit operates a website called NemeZida, where they disclose sensitive data, and has been involved in disinformation campaigns supporting Russian narratives. Their activities include collaboration with other hacktivist groups and targeting Ukrainian cyberdefense efforts.",
+      "meta": {
+        "country": "RU",
+        "refs": [
+          "https://flashpoint.io/blog/pro-kremlin-hacktivist-groups/",
+          "https://news.risky.biz/risky-biz-news-doppelganger-gets-a-kick-in-the-butt-from-uncle-sam/"
+        ],
+        "synonyms": [
+          "Russian Angry Hackers Did It"
+        ]
+      },
+      "uuid": "1e3efe43-9006-4ac8-b9ee-f1fbb9794cd9",
+      "value": "RaHDit"
     }
   ],
   "version": 313