An advanced persistent threat actor has executed a script to automate the extraction of sensitive data, including phone numbers and personal details, from the API. This operation bypasses the usual rate limits and security measures by exploiting vulnerabilities in the web server logic.