Threat-actor dataset

568 threat actors with their attributed CVEs, ATT&CK techniques, IDF exclusivity score, target sectors, and naming aliases — the same data behind /actors.html, the similarity graph, and the CVE→actor lookup.

Downloads

• actors.json — bulk JSON (all actors)
• actors.csv — flat CSV
• actor/<id>.json — one JSON per actor
• schema.json — field documentation
• README.md — license + provenance

How this data is computed →

Generated 2026-07-04. Attribution is sparse — most CVEs have no public actor attribution on record.