diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index de38f56..23c5178 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -6231,7 +6231,8 @@
           "https://labs.bitdefender.com/2018/02/operation-pzchao-a-possible-return-of-the-iron-tiger-apt/",
           "https://securelist.com/luckymouse-hits-national-data-center/86083/",
           "https://attack.mitre.org/groups/G0027/",
-          "https://www.secureworks.com/research/threat-profiles/bronze-union"
+          "https://www.secureworks.com/research/threat-profiles/bronze-union",
+          "https://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/incident-response-polar-ransomware-apt27/"
         ],
         "synonyms": [
           "Emissary Panda",
@@ -8498,5 +8499,5 @@
       "value": "Operation Skeleton Key"
     }
   ],
-  "version": 190
+  "version": 191
 }