An ethical hacking team discovers that a malicious actor has gained unauthorized access to an organization’s machine learning pipeline. The actor has subtly altered the dataset used to retrain the company's autonomous customer-service chatbot, intentionally introducing skewed entries to make the bot behave erratically and provide biased answers once deployed.

Which vector of the AI attack surface does this scenario specifically describe?