diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 4c6449e1..fa62abd6 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -94,6 +94,9 @@
         ],
         "synonyms": [
           "Covert Grove"
+        ],
+        "targeted-sector": [
+          "Chemical"
         ]
       },
       "uuid": "0b06fb39-ed3d-4868-ac42-12fff6df2c80",
@@ -144,6 +147,10 @@
         "country": "CN",
         "refs": [
           "https://www.sans.org/cyber-security-summit/archives/file/summit-archive-1492182276.pdf"
+        ],
+        "targeted-sector": [
+          "Technology",
+          "Telecoms"
         ]
       },
       "uuid": "41c15f08-a646-49f7-a644-1bebbf7a4dcd",
@@ -1556,6 +1563,12 @@
           "Ajax Security Team",
           "Group 26",
           "Sayad"
+        ],
+        "targeted-sector": [
+          "Aerospace",
+          "Defense",
+          "Gas",
+          "Oil"
         ]
       },
       "related": [