# Membership Inference Attack on Private Evolution

DevFeed: [Membership Inference Attack on Private Evolution](<https://devfeed.tech/articles/membership-inference-attack-on-private-evolution-96583.md>)

Original publisher: [Read original article](<https://arxiv.org/abs/2610.30514>)

Author: Daniil Filienko, Sikha Pentyala, Martine De Cock

Published: 2026-10-23T04:00:00Z

Content type: article

Language: en

Sources: [arXiv: Cryptography and Security](<https://devfeed.tech/sources/arxiv-cryptography-and-security.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Adversarial attacks](<https://devfeed.tech/topics/adversarial-attacks.md>), [sensitive data](<https://devfeed.tech/topics/sensitive-data.md>), [AI Foundation Models](<https://devfeed.tech/topics/ai-foundation-models.md>)

Tags: [adversarial](<https://devfeed.tech/tags/adversarial.md>), [algorithm](<https://devfeed.tech/tags/algorithm.md>), [attack](<https://devfeed.tech/tags/attack.md>), [auditing](<https://devfeed.tech/tags/auditing.md>), [cs-cr](<https://devfeed.tech/tags/cs-cr.md>), [data-leakage](<https://devfeed.tech/tags/data-leakage.md>), [differential-privacy](<https://devfeed.tech/tags/differential-privacy.md>), [evolution](<https://devfeed.tech/tags/evolution.md>), [foundation-models](<https://devfeed.tech/tags/foundation-models.md>), [framework](<https://devfeed.tech/tags/framework.md>), [generation](<https://devfeed.tech/tags/generation.md>), [image](<https://devfeed.tech/tags/image.md>), [inference](<https://devfeed.tech/tags/inference.md>), [pre-trained-foundation-models](<https://devfeed.tech/tags/pre-trained-foundation-models.md>), [privacy](<https://devfeed.tech/tags/privacy.md>), [private](<https://devfeed.tech/tags/private.md>), [process](<https://devfeed.tech/tags/process.md>), [proximity](<https://devfeed.tech/tags/proximity.md>), [survival](<https://devfeed.tech/tags/survival.md>), [synthetic](<https://devfeed.tech/tags/synthetic.md>), [synthetic-data-generation](<https://devfeed.tech/tags/synthetic-data-generation.md>)

## AI overview

The paper reports a white-box membership inference attack tailored to Private Evolution's voting-based synthetic data generation. It exploits iterative filtering, which can favor candidates that survive and remain close to private instances. The authors report empirical evidence of private-data leakage in PE applications across image, text, and tabular data. Although PE is designed to provide Differential Privacy, the abstract argues that empirical auditing remains relevant; it gives no attack metrics or detailed evaluation results.

## Source excerpt

arXiv:2610.30514v1 Announce Type: new Abstract: Synthetic Data Generation (SDG) is an actively studied way to enable safe sharing of private data more broadly. Inference-only SDG methods, such as Private Evolution (PE), are particularly appealing, as they can leverage black-box access to pre-trained foundation models to generate high quality data without the need for model fine-tuning on the private data. PE is explicitly designed to produce synthetic data under Differential Privacy (DP). Yet formal DP guarantees do not eliminate the need for empirical privacy auditing of the practical susceptibility of released synthetic data to adversarial attacks. In this work, we introduce the first white-box Membership Inference Attack (MIA) tailored to the voting-based algorithm underlying the PE framework. By exploiting how the iterative filtering process biases the survival and proximity of synthetic candidates toward private instances, our attack achieves empirical performance indicating private data leakage in the PE applications across image, text, and tabular modalities.