Cactus ransomware has added Schneider Electric to its leak site, claiming to have stolen 1.5 terabytes of data.