The unauthorized, covert transfer of sensitive data from a secure corporate computer or network.
Data Exfiltration (also known as data extrusion or data theft) occurs when malware or a malicious actor carries out an unauthorized transfer of data from a computer or network.
This can occur via targeted cyberattacks, social engineering, or even accidental leakage by employees using shadow IT (such as pasting proprietary code into public AI chatbots).
Preventing data exfiltration is one of the main reasons organizations adopt Private AI and enforce air-gapped environments, both of which keep intellectual property inside the corporate boundary.
See also Shadow IT, Private AI, Air-Gapped Environment, Role-Based Access Control and Zero Trust Architecture.