Threat intelligence / Technique

Exfiltration via AI Inference API

Adversaries may exfiltrate private information via [AI Model Inference API Access](/techniques/AML.T0040). AI Models have been shown leak private information about their training data (e.g. [Infer Training Data Membership](/techniques/AML.T0024.000), [Invert AI Model](/techniques/AML.T0024.001)). The model itself may also be extracted ([Extract AI Model](/techniques/AML.T0024.002)) for the purposes of [AI Intellectual Property Theft](/techniques/AML.T0048.004). Exfiltration of information relating to private training data raises privacy concerns. Private training data may include personally identifiable information, or other protected data.

Technique

TypeTechnique

External ID—

First seen2026-08-14

Last seen2026-08-14

Confidence

—

Adversaries may exfiltrate private information via [AI Model Inference API Access](/techniques/AML.T0040). AI Models have been shown leak private information about their training data (e.g. [Infer Training Data Membership](/techniques/AML.T0024.000), [Invert AI Model](/techniques/AML.T0024.001)). The model itself may also be extracted ([Extract AI Model](/techniques/AML.T0024.002)) for the purposes of [AI Intellectual Property Theft](/techniques/AML.T0048.004). Exfiltration of information relating to private training data raises privacy concerns. Private training data may include personally identifiable information, or other protected data.

7 recorded

Relationships

mitigates

from AI Red Team

Mitigation

mitigates

from AI Telemetry Logging

Mitigation

mitigates

from Control Access to AI Models and Data in Production

Mitigation

mitigates

from Limit AI Service Query Volume and Rate

Mitigation

subtechnique-of

from Extract AI Model

Technique

subtechnique-of

from Infer Training Data Membership

Technique

subtechnique-of

from Invert AI Model

Technique

1 external

References

mitre-atlas

AML.T0024