Hacktivism

Ideologically motivated attackers optimise for attention rather than money, which changes what they do.

Defacement, leaks timed for effect, disruption during an event. The technical capability is often modest and the objective is visibility, so the damage is reputational more than financial. It also means the timing is predictable in a way criminal activity is not, because it follows the news.