The transfer of data to unauthorized, external individuals or servers, typically by a cyber thief or malware.