pii • AI Security Wire

img of Incident Report: Insurance Chatbot Exposed 80,000 Customer Records

A UK insurance provider has disclosed that its AI customer service chatbot, due to an IDOR vulnerability in the underlying API and excessive tool permissions, allowed authenticated users to retrieve policy documents and PII belonging to other customers.

img of Membership Inference Attacks: How Much Training Data Can Be Recovered

May 19, 2026 5 min read

Research

Membership Inference Attacks: How Much Training Data Can Be Recovered

A systematic study of membership inference attacks against foundation models finds that training data can be reconstructed from model weights with significantly higher accuracy than previously reported, with implications for GDPR compliance and PII handling in AI development.

img of Model Inversion Attacks: Extracting Training Data PII from Production LLMs

May 17, 2026 2 min read

Vulnerabilities

Model Inversion Attacks: Extracting Training Data PII from Production LLMs

Model inversion and training data extraction attacks allow adversaries to recover PII, proprietary data, and trade secrets from fine-tuned LLMs exposed via API — a significant compliance and IP risk for enterprises.