Ransomware gangs have shifted their approach. They no longer just settle for encrypting data – but seek larger payouts by comprising businesses and data in new ways. Now, the goal often is to extort data in multiple ways, by stealing, leaking, or damaging it along the way. Data exfiltration is when malware or bad actors enact an unauthorized data transfer from one device or system to another. This is a form of data theft that is also known as data extrusion or data exportation, which are infiltrated through a wide variety of means (such as phishing, etc.). Data leakage is another form of theft which occurs when transmission from within an organization is purposefully sent to an external source or recipient. Leakage can expose sensitive or valuable business data to unwarranted parties including nation states, public forums, and the dark web. In both instances, exfiltration and leakage present to new challenges and imperatives to safeguard data – beyond just recovering from post-encrypted states.