Automated means refers to using scripts, bots, or other software processes to collect or extract data, rather than retrieving it manually. Automation can make legitimate tasks such as backups and system reporting more efficient, but it can also let an attacker gather large volumes of information quickly.
In a breach, automated data retrieval may involve repeatedly querying an application or exporting records from a system the attacker can access. Unusually large or rapid requests can be a warning sign, so defenders monitor access logs, set limits on data retrieval, and restrict permissions to only what each account or service needs. The term describes how data may be collected; by itself, it does not identify how an attacker gained access.