As a security analyst at a financial institution, you noticed an unexpected surge in outbound network traffic during off-hours when the office is typically empty. While investigating, you uncover numerous connections to foreign IP addresses known to be outside of your organization's normal communications. Which of the following is the MOST likely explanation for this traffic?
Data exfiltration attempts
Routine backup processes
Network performance testing
Authorized remote employee access