A type of SQL Injection where attacker uses database functions that cause a delay (e.g., SLEEP() or pg_sleep()) if a specific condition is true. Data is then inferred by measuring the time it takes for the server to respond.