An unauthorized attempt to exfiltrate sensitive documents and communications was detected. The attackers leveraged encrypted channels to avoid detection. The attempt involved the transfer of files to an external server.