Large outbound response from exposed MySQL server indicating possible database record exfiltration

Duo Tech@duotech

•updated Jul 8, 2026•1•0•1

Detects an unusually large data transfer (greater than 5MB) from an internal MySQL server to an external network, which may indicate unauthorized database record exfiltration or data dumping.