Threat actor is a more generic term that covers all kinds of attackers.

For example, it could be an insider who exploits existing privileges (no hacking involved). Or it could refer to a nation state or organised crime (not an individual).