diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 2f88cb7..9f44df9 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -12688,6 +12688,18 @@
       },
       "uuid": "825abfd9-7238-4438-a9e7-c08791f4df4e",
       "value": "TraderTraitor"
+    },
+    {
+      "description": "The Dark Overlord is a financially motivated ransomware group that has been active since 2016. The group is known for targeting large organizations, including Netflix, ABC, and Miramax.",
+      "meta": {
+        "refs": [
+          "https://www.databreaches.net/peachtree-orthopedics-alerts-patients-of-cyberattack-third-patient-data-breach-in-seven-years/",
+          "http://securityaffairs.co/wordpress/64782/data-breach/london-bridge-plastic-surgery-hack.html",
+          "http://www.csoonline.com/article/3193397/security/no-netflix-is-not-a-victim-of-ransomware.html"
+        ]
+      },
+      "uuid": "167bd5f9-fa61-4a4e-91bc-3ca0d17294b2",
+      "value": "TheDarkOverlord"
     }
   ],
   "version": 293