diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 7785cbd5..70ae18d9 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -15955,6 +15955,17 @@
       },
       "uuid": "485947c7-edb6-4a07-9276-2114dc767551",
       "value": "PhantomCore"
+    },
+    {
+      "description": "CiberInteligenciaSV is a threat actor that leaked 5.1 million Salvadoran records on Breach Forums. They have also compromised El Salvador's state Bitcoin wallet, Chivo, leaking its source code and VPN credentials. The group aims to obscure their involvement by associating with the Guacamaya group and its proxies.",
+      "meta": {
+        "refs": [
+          "https://securityaffairs.com/162790/data-breach/el-salvador-massive-leak-biometric-data.html",
+          "https://www.cysecurity.news/2024/04/cryptocurrency-chaos-el-salvadors.html"
+        ]
+      },
+      "uuid": "0558bc64-21d9-43e4-8b12-18172d9b5c7d",
+      "value": "CiberInteligenciaSV"
     }
   ],
   "version": 308