APT3 successfully exfiltrated sensitive data to a remote server under their control. The operation was detected through unusual network traffic patterns and data flow volumes originating from an internal host to an external IP associated with known malicious activity.