diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 2cbb3f8..1d45d5f 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -17537,6 +17537,17 @@
       },
       "uuid": "301ffea9-edd5-4d89-a65f-8add8e34e95d",
       "value": "Storm-0940"
+    },
+    {
+      "description": "Anonymous KSA is a Saudi hacking group that has executed cyber attacks targeting Indian institutions, including a significant breach of UIDAI's data storage units, leading to access to sensitive information and system disruption. The group claims these actions are in response to India's normalization of ties with Israel and its treatment of Palestinians. They have called for support for the Palestinian cause and accountability for the damage caused by their operations. The group's TTPs include targeting government agencies and leveraging public sentiment to justify their actions.",
+      "meta": {
+        "refs": [
+          "https://x.com/DailyDarkWeb/status/1807783849608286296",
+          "https://cybershafarat.com/2024/07/22/hacking-group-anonymous-ksa-a-notorious-threat-actor-is-targeting-india-in-a-series-of-cyber-attacks/"
+        ]
+      },
+      "uuid": "b869c1dc-0cf8-4d8a-b5f3-5b90c557db1c",
+      "value": "Anonymous KSA"
     }
   ],
   "version": 321