diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 5531d008..6f0baff0 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -4834,7 +4834,8 @@
           "TIN WOODLAWN",
           "BISMUTH",
           "ATK17",
-          "G0050"
+          "G0050",
+          "Canvas Cyclone"
         ],
         "targeted-sector": [
           "Dissidents",