Out of curiosity, how does a chip that does inference calculations exfiltrate data without being seen?

Has this happened already or is it just conceptually possible?