Amazes me how many companies can't do the simple thing of measuring their normal traffic and setting a baseline.
Once you've done that you can just monitor for exceptions and be alerted if large amounts of data start moving where they are not supposed to.
There are lots of free, open source Netflow analyzers and it simply requires a little bit of work.