This is a preprint demonstrating a novel attack methodology on machine learning systems; it raises security questions about unlearning robustness but does not evaluate clinical, regulatory, or patient-relevant outcomes.
Reported
Entity recovery accuracy100%
Forgotten prompt reconstruction r…up to 95%
Query efficiency gain99.7% fewer queries than naive probing