HighAgenticData Exfiltration via Tools●Realized
Sensitive Payload Leakage
Tool & Affordance RiskDescription
Agent leaks sensitive data through tool invocations, API calls, or external service interactions. Intentional or unintentional transmission of confidential data through legitimate-appearing tool interfaces.
Example scenario
Agent includes full customer PII in API call parameters to an analytics service that logs all requests.
Real-world evidence●Realized
Confirmed production cases exist where users interacted with AI systems without any disclosure of their non-human nature, and courts have held companies accountable for the harm caused. Regulatory bodies including the FTC have cited undisclosed AI interactions as a deceptive practice in active enforcement actions.
Primary mitigations
- Data sensitivity classification
- egress monitoring on tool calls
- PII detection in outbound payloads
- data minimisation in tool parameters.
Detection signals
Sensitive Payload Leakage Rate; PII detection in tool-call parameters.
Mitigating controls
4 Dual coverage
ZYC-PDP-02Agentic
Egress monitoring for sensitive data in tool calls
Privacy & Data Protection
ZYC-PRIV-001Non-Agentic
PII Detection and Classification
Privacy & Data Governance
ZYC-PRIV-003Non-Agentic
Privacy Policy enforcement – Prompt Filtering
Privacy & Data Governance
ZYC-PRIV-004Non-Agentic
Privacy Policy enforcement – Response Filtering
Privacy & Data Governance