Data exfiltration is a form of security breach that occurs when a malicious actor conducts an unauthorized data transfer. Data exfiltration can be carried out remotely or manually and, as it resembles normal network traffic, it can be difficult to detect.