Data exfiltration is a frequent outcome of successful API attacks and abuse. In some cases, it refers to highly sensitive, non-public information that has been stolen by a bad actor through API attacks and abuse. However, it can also apply to less severe types of API abuse, including aggressive data scraping of publicly available data to assemble large data sets that are valuable in aggregate form.