The practical challenge of exfiltration—moving a compromised asset, a stolen data package, or an operative under active surveillance out of corporate-controlled space—defines much of the operational infrastructure that intelligence practitioners in GLMZ have built over the past two decades. The city's physical and digital geography creates a specific set of exfiltration challenges: corporate campuses are increasingly self-contained environments with controlled egress points, the autonomous vehicle network provides comprehensive location logging of all sanctioned surface transport, and the lake—historically a natural escape route—is now monitored by a jointly operated maritime surveillance system maintained by the Lakeshore Security Compact. The result is that professional exfiltration operations require pre-planned infrastructure rather than improvised solutions.

Physical exfiltration routes exploit the city's infrastructure layers in sequence. The most reliable established corridors thread through the sub-basement maintenance networks of pre-Consolidation commercial buildings in the Near West Industrial Zone, where connecting tunnels between structures were built for steam pipe access and never incorporated into modern building management systems. From there, operatives can access the old combined sewer overflow tunnels that discharge at three points along the southern lakefront—physically unpleasant but monitored only by flow sensors calibrated for water volume rather than human passage. Surface re-emergence points are typically in the Calumet Reclamation Zone's eastern margin, outside the primary surveillance mesh coverage. The full route, from a Northwall corporate campus to an unsurveilled surface emergence point, takes between four and seven hours depending on physical condition and current infrastructure status.

Digital exfiltration of data presents distinct challenges shaped by GLMZ's network architecture. Corporate internal networks are typically isolated from external connectivity at the hardware layer for sensitive data repositories, meaning exfiltration requires either physical media transport or exploitation of permitted data channels. The most commonly exploited permitted channels are calibration data uploads from manufacturing equipment—narrow-band connections that exist to allow vendor remote diagnostics and are rarely subjected to content inspection—and medical telemetry streams from employee health monitoring systems, which carry legal privacy protections that limit how aggressively corporate security can inspect their contents. Steganographic encoding of intelligence data within these legitimate data streams has been documented in at least four confirmed corporate espionage cases litigated in GLMZ's corporate arbitration courts.

The exfiltration infrastructure itself is maintained by a loose network of independent logistical specialists who operate as commercial services—nominally offering 'executive relocation consulting,' 'sensitive document courier services,' or 'personal security transport.' The most established of these operations maintain physical safe houses at intervals along primary exfiltration corridors, stocked with clean identity documentation, clothing, and basic medical supplies. The commercial cover is genuine in the sense that these operations do accept legitimate clients, which provides financial legitimacy and operational cover. Their intelligence-community clientele pay premium rates not only for the service but for the plausible deniability that a commercially registered entity provides when the movement of a person or package requires explanation.