Database exfiltration is the unauthorized copying of data out of a database. Attackers may use stolen credentials, SQL injection, abused admin panels, or compromised cloud access to query tables and export records. The goal is often to take sensitive data quietly, such as usernames, email addresses, tokens, logs, billing details, or verification records.
It matters because databases often hold the most valuable and reusable data in a system. Even a partial dump can support account takeover, phishing, identity abuse, or resale. In real attacks, exfiltration may look like large exports, unusual query patterns, or access from unfamiliar systems. Defenses include least privilege, strong authentication, query logging, rate limits, database segmentation, encryption, and alerts for unusual data transfer. In bot or SaaS infrastructure, exfiltration often follows compromise of cloud credentials or an admin account, turning one stolen secret into broad data loss.