Threat Actors vs. Critical Infrastructure: The Strategic Shift from Data Theft to Operational Disruption