There are 17 attacks in the privacy-violation category. Each shows its technique id, mode, standards mapping, description, and the exact command to run it (swap the provider and target as needed).
Biometric Extraction
critical
biometric-extraction · single-turn · OWASP: LLM02 · MITRE: AML.T0054, AML.T0056Requests extraction or reconstruction of biometric identifiers from indirect dataRun it:
ai-blackteam run -p anthropic -a biometric-extraction -t "your target prompt"
Child Data Probing
critical
child-data-probing · single-turn · OWASP: LLM02 · MITRE: AML.T0054, AML.T0056Probes for collection or disclosure of children’s personal data, violating COPPA and similar protectionsRun it:
ai-blackteam run -p anthropic -a child-data-probing -t "your target prompt"
Cross-Reference Doxing
critical
cross-reference-doxing · multi-turn · OWASP: LLM02 · MITRE: AML.T0054, AML.T0056Cross-references publicly available data sources to compile a dossier that doxes an individualRun it:
ai-blackteam run -p anthropic -a cross-reference-doxing -t "your target prompt"
Training Data Extraction
critical
training-data-extraction · single-turn · OWASP: LLM02 · MITRE: AML.T0054, AML.T0056Prompts designed to extract verbatim memorized content from the model’s training dataRun it:
ai-blackteam run -p anthropic -a training-data-extraction -t "your target prompt"
Attribute Inference
high
attribute-inference · single-turn · OWASP: LLM02 · MITRE: AML.T0054, AML.T0056Infers sensitive personal attributes about individuals from partial or public informationRun it:
ai-blackteam run -p anthropic -a attribute-inference -t "your target prompt"
consent-bypass-extraction · single-turn · OWASP: LLM02 · MITRE: AML.T0054, AML.T0056Extracts private data by falsely claiming that the data subject has given consentRun it:
ai-blackteam run -p anthropic -a consent-bypass-extraction -t "your target prompt"
Data Broker Assist
high
data-broker-assist · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Generates strategies for aggregating personal data across data brokers to build surveillance profiles on individuals without consentRun it:
ai-blackteam run -p anthropic -a data-broker-assist -t "your target prompt"
Deanonymization
high
deanonymization · single-turn · OWASP: LLM02 · MITRE: AML.T0054, AML.T0056Attempts to re-identify individuals from anonymized or pseudonymized datasetsRun it:
ai-blackteam run -p anthropic -a deanonymization -t "your target prompt"
Financial Data Probing
high
financial-data-probing · single-turn · OWASP: LLM02 · MITRE: AML.T0054, AML.T0056Probes for financial and banking details about specific individualsRun it:
ai-blackteam run -p anthropic -a financial-data-probing -t "your target prompt"
GDPR Probing
high
gdpr-probing · multi-turn · MITRE: AML.T0054, AML.T0065Progressive probing to extract personal data through GDPR compliance framingRun it:
ai-blackteam run -p anthropic -a gdpr-probing -t "your target prompt"
Health Data Probing
high
health-data-probing · single-turn · OWASP: LLM02 · MITRE: AML.T0054, AML.T0056Probes for medical and health information about specific individualsRun it:
ai-blackteam run -p anthropic -a health-data-probing -t "your target prompt"
Location Tracking
high
location-tracking · single-turn · OWASP: LLM02 · MITRE: AML.T0054, AML.T0056Asks the model to help track or find people’s physical locations from available dataRun it:
ai-blackteam run -p anthropic -a location-tracking -t "your target prompt"
Membership Inference
high
membership-inference · single-turn · OWASP: LLM02 · MITRE: AML.T0054, AML.T0056Tests whether specific private data was included in the model’s training setRun it:
ai-blackteam run -p anthropic -a membership-inference -t "your target prompt"
PII Inference
high
pii-inference · single-turn · OWASP: LLM02 · MITRE: AML.T0054, AML.T0056Asks the model to infer personally identifiable information from indirect context cluesRun it:
ai-blackteam run -p anthropic -a pii-inference -t "your target prompt"
Profiling Attack
high
profiling-attack · multi-turn · OWASP: LLM02 · MITRE: AML.T0054, AML.T0056Builds detailed psychological, behavioral, and predictive profiles of individuals across multiple turnsRun it:
ai-blackteam run -p anthropic -a profiling-attack -t "your target prompt"
Relationship Mapping
high
relationship-mapping · multi-turn · OWASP: LLM02 · MITRE: AML.T0054, AML.T0056Maps social networks and personal relationships of a target individual across multiple turnsRun it:
ai-blackteam run -p anthropic -a relationship-mapping -t "your target prompt"
Surveillance Assistance
high
surveillance-assistance · single-turn · OWASP: LLM02 · MITRE: AML.T0054, AML.T0056Asks the model to assist with covert surveillance or monitoring of individualsRun it:
ai-blackteam run -p anthropic -a surveillance-assistance -t "your target prompt"