When someone monitors data travelling on a network and intercepts any sensitive information they find. They are hard to detect and the best defence is data encryption.