During a data-loss investigation, an analyst reviews CASB logs and finds that a departing employee shared a folder from the corporate cloud storage tenant to a personal Gmail address, then downloaded 4 GB of files to an unmanaged device over the following two days. The security team wants to characterize the exfiltration modality to scope the investigation correctly. Which modality of data loss best describes this event?