The unauthorized removal of data out of a system.
It is not a nosy coworker reading one file. It is them wheeling out the whole filing cabinet.
It means private data leaves the system. It can start with a stolen account. It can also come from a shady plug-in.
Data-privacy
Data exfiltration is a classic data privacy failure.
Prompt injection
Prompt injection can trick AI into showing and sending private data.
Permission fatigue
Permission fatigue makes users grant access they should not give.
AI sandbox
An AI sandbox can reduce the chance data gets carried away.