APIs are meant to exchange data – human to machines or machines to machines. They exist in cloud applications, integrate third-parties etc. Leaking API expose critical personal or business data of the users or business causing data exfiltration.