An advanced persistent threat group, Black Basta, attempted to exfiltrate confidential data from the internal network as part of a double extortion scheme. The operation involved transferring sensitive files to an external server before encrypting the stolen data to demand a ransom.