Data exfiltration
Data taken out of an organisation without authorisation.
Advisories that mention this term
E-Commerce ERP Provider Mallbic Hosts Hit by Unauthorized Malicious Commands; Shopline Rotates API Keys
According to iThome, e-commerce cloud ERP provider Mallbic stated that routine daily security checks on October 31 uncovered host anomalies and confirmed that unauthorized malicious commands had been executed on certain hosts; attackers entered through a brand website service portal, potentially affecting consumer and transaction data imported by merchants from other e-commerce platforms .
Auto Parts Manufacturer Orange Electronic Reports Ransomware Attack on Local Network Storage Devices
On October 28, Orange Electronic issued a material information filing on MOPS stating that some of its local area network storage devices had been hit by a ransomware attack, and its cybersecurity team immediately activated defense mechanisms and network isolation .
91APP Commerce Cloud Order Database Breached: Unpatched Appsmith Exploited as Entry Point; Member Order Data Across Brands Leaked and Abused for Scams
E-commerce technology provider 91APP confirmed that one of its Commerce Cloud order databases was illegally accessed on October 3 via an unpatched third-party tool, Appsmith, after which the attacker retrieved database credentials from an internal GitLab instance .
Intruders reach McKesson through third-party applications and exfiltrate data of some oncology and medical-surgical customers
US drug distributor McKesson said in an SEC 8-K filing that it discovered a cybersecurity incident affecting its information systems on August 25 and that the investigation is in its early stages .
CISA Adds BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) Vulnerability CVE-2026-1731 to Known Exploited Vulnerabilities Catalog
On 2026-02-13, CISA added CVE-2026-1731 (BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)) to its Known Exploited Vulnerabilities (KEV) catalog .