With access to critical data, Lapsus$ begins exfiltrating 1TB of proprietary information, including GPU drivers and firmware. The data exfiltration was detected by monitoring anomalous outbound traffic from an internal server to a known malicious IP address.