---
title: "Creating Victims | ThreatConnect"
slug: "creating-victims"
description: "This article describes how to create Victims using the + Create Victim option on the Search: Victims screen in ThreatConnect."
tags: ["Getting Started"]
updated: 2026-01-11T15:22:02Z
published: 2026-01-11T15:22:02Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://knowledge.threatconnect.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Creating Victims

## Overview

A [Victim](https://knowledge.threatconnect.com/docs/the-threatconnect-data-model#victims) represents a specific organization or group that has been targeted or whose assets have been exploited (e.g., accounts, infrastructure, equipment). You can create individual Victims in your [ThreatConnect® owners](https://knowledge.threatconnect.com/docs/ownership-in-threatconnect) using the **+ Create Victim**option on the **[](https://knowledge.threatconnect.com/docs/searching-victims)** [](https://knowledge.threatconnect.com/docs/searching-victims)[**Search: Victims**screen](https://knowledge.threatconnect.com/docs/searching-victims)[](https://knowledge.threatconnect.com/docs/searching-victims)**[](https://knowledge.threatconnect.com/docs/searching-victims)**.

## Before You Start

### User Roles

- To create Victims in an Organization, your user account must have an [Organization role](https://knowledge.threatconnect.com/docs/organization-roles) of Standard User, Sharing User, Organization Administrator, or App Developer.
- To create Victims in a Community or Source, your user account must have a [Community role](https://knowledge.threatconnect.com/docs/community-roles) of Contributor, Editor, or Director for that Community or Source.

## Creating a Victim

Follow these steps to create a Victim:

1. From the **Search & Create**dropdown on the top navigation bar, select **Victims**.
2. Click **+ Create Victim**at the upper right of the **Search: Victims**screen.
3. On the **Create Victim**window, do the following:
  1. Select the [owner](https://knowledge.threatconnect.com/docs/ownership-in-threatconnect) in which to create the Victim.
  2. Enter the Victim’s name.
  3. (Optional) Provide some or all of the following details for the Victim: [Description](https://knowledge.threatconnect.com/docs/the-description-attribute), organization, sub-organization, nationality, and work location.
  4. Click **SAVE** to create the Victim.

---

*ThreatConnect® is a registered trademark of ThreatConnect, Inc.*

20003-04 v.01.C