In the final phase of a coordinated exfiltration operation, 54 million customer records were extracted and sent to an external IP. The data is expected to be sold on underground forums. Immediate action is required to prevent further data loss.