Sensitive Information Exfiltration

Sensitive information exfiltration occurs when an attacker, malicious user, or compromised AI workflow causes protected data to leave its intended environment. In AI systems, this can involve prompts, model responses, connected databases, uploaded files, credentials, or personal information being exposed through unintended outputs, tool calls, or external services.

Sensitive information exfiltration can lead to data breaches, privacy violations, financial losses, and regulatory consequences. AI systems can increase this risk because they may have access to large datasets, external tools, APIs, and business systems, making strong access controls, monitoring, and output protection important.