Maze completes their attack by exfiltrating sensitive data to an external server, setting the stage for their double extortion tactic by threatening data leaks. The firewall detected unusual outbound traffic to a known malicious IP address, along with the transfer of a file with a suspicious hash.