diff --git a/CHANGELOG.md b/CHANGELOG.md
index 88a0467b6..3d40d5bfe 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -78,6 +78,7 @@ Changelog](https://keepachangelog.com/en/1.0.0/).
 - A bug where T1216_random_executable.exe was copied to disk even if the signed
   script proxy execution PBA was disabled. #1864
 - Unnecessary collection of kerberos credentials. #1771
+- A bug where bogus users were collected by Mimikatz and added to the config. #1860
 
 
 ### Security