An attack against machine learning models that infers sensitive attributes of a training data record, given partial knowledge about the record.
Sources:
NIST AI 100-2e2025