Data Exfiltration (Agent)

Data exfiltration via AI agents occurs when an agent, whether compromised or misconfigured, transmits sensitive data to an unauthorised destination. Agents are particularly high-risk exfiltration vectors because they routinely access internal systems, process sensitive data, and make outbound API calls — all of which can be exploited if access controls and output monitoring are insufficient.