Data Exfiltration definition in Cybersecurity
Data exfiltration refers to the unauthorized copying, transfer, or retrieval of data from a computer or server. This can be done manually by someone with physical access or remotely by an attacker exploiting a security vulnerability.
Notable Incidents
- The Sony Pictures hack in 2014, resulting in the leak of personal information, emails, and film data.
- The Anthem Inc. data breach in 2015, where attackers exfiltrated personal data of millions of customers.
How to Protect Your Network against Data Exfiltration
- Implement data loss prevention (DLP) tools.
- Monitor and control outbound traffic through network segmentation and egress filtering.