Data Exfiltration
Category: Data“DAY-ta eks-fil-TRAY-shun”
Information being quietly moved out of your systems to somewhere it doesn't belong.
Lesson #9: Securing AI Agents: Cybersecurity Essentials →Materials walking off the job site one truckload at a time, so nobody notices until inventory day.
An app copying your contacts to its own servers in the background.
An agent with web access pastes customer addresses into an outside service to 'look up directions'.
A compromised assistant summarizes the client list into an email sent to an attacker-controlled address.
Agents that can both read your data and reach the internet can leak it in one step, so those two powers need separating.
Data exfiltration is sensitive information leaving your systems without permission.
For each AI tool you use, ask: can it read sensitive data AND send data outside? Flag any that can do both.
Hover or focus a choice to preview the new review date.
Exercises by category
- Agents0/21 · 0%
- Models0/10 · 0%
- Data0/11 · 0%
- Infrastructure0/22 · 0%
- Fundamentals0/15 · 0%
- NobleHub0/20 · 0%
Next badge: First Nail — 1 more exercise
Related terms
Picked automatically from the same category and the ideas this term shares.
Hand-picked pair
Automatically stripping out personal details — names, addresses, card numbers — before text is stored or sent to an AI.
Hand-picked pair
Giving a person or an AI exactly the access needed for the job and nothing more.
Hand-picked pair
Running code or an AI in a walled-off space where it can work freely but cannot reach anything important if it goes wrong.
Same category: Data
Keeping personal or confidential information out of places it shouldn't go — including AI tools.
Same category: Data
The information an AI studied in order to learn.
Same category: Data
A record of specific past events — what happened, when, and what came of it.
See it in Python
Truth Code: Python lessons that use this idea in real code.