ATLASAML.T0024
ATLAS index
AML.T0024

Exfiltration via AI Inference API

Adversaries may exfiltrate private information via AI Model Inference API Access. AI Models have been shown leak private information about their training data (e.g. Infer Training Data Membership, Invert AI Model). The model itself may also be extracted (Extract AI Model) for the purposes of AI Intellectual Property Th

Framework
MITRE ATLAS
Maturity
Feasible
Platforms
Predictive AI, Generative AI, Agentic AI
Release
2026.05

Overview

Adversaries may exfiltrate private information via AI Model Inference API Access. AI Models have been shown leak private information about their training data (e.g. Infer Training Data Membership, Invert AI Model). The model itself may also be extracted (Extract AI Model) for the purposes of AI Intellectual Property Theft.

Exfiltration of information relating to private training data raises privacy concerns. Private training data may include personally identifiable information, or other protected data.

Sources

  1. MITRE ATLAS AML.T0024: Exfiltration via AI Inference API — MITRE