A threat actor is an individual or group that poses a potential security threat to a system or organization. This can include hackers, cyber criminals, insiders, or even natural disasters.