This phrase is tied to Cyber Security. Most feel if they don't own a company and are just a home user, the threat of having their data compromised is low. This is untrue in today's reality of sophisticated "hackers" who should, instead, be referred to as terrorists. Simply put, a "threat actor" or "threat actors" is defined as a person or persons who performs an intentional malicious action against your internet security with the sole purpose of obtaining confidential/personal information for the use of identiy theft to apply for loans or other options to obtain funds in someone else's name. This can damage a person's credit, or in the case of a corporation, it can bring the business functions to its knees as we saw with the cyberattacks on the oil pipeline and meat processing plants in the first half of 2021. Types of Threat Actors Cybercriminal: (CTA) is a participant (person or group) in an action or process that is characterized by malice or hostile action (intending harm) using computers, devices, systems, or networks. Insider Threats: An insider threat is a security risk that originates within the targeted organization. This doesn't mean that the actor must be a current employee or officer in the organization. They could be a consultant, former employee, business partner, or board member. Nation States: Defining what a "nation-state threat actor" is may seem like a simple task: a hacker or group of hackers working with an adversarial government that commits acts of cybercrime against the U.S. or its allies.