safety security
Brain Embeddings Still Identify the Patient
Five frozen medical-image encoders retain enough subject signal for linkage above 90 percent in the highest-risk representations.
Summary
Five frozen medical-image encoders retain enough subject signal for linkage above 90 percent in the highest-risk representations.
With public encoders and auxiliary scans, the evaluated attacker reaches up to 99 percent rank-one linkage on MIRIAD and above 90 percent on OASIS-2, while recorded-sex prediction reaches 90.9 and 95.5 percent balanced accuracy. Learned representations alone do not establish anonymity.
Why it matters
Five frozen medical-image encoders retain enough subject signal for linkage above 90 percent in the highest-risk representations.
Limits and context
- Learned representations alone do not establish anonymity.
Key claims
Five frozen medical-image encoders retain enough subject signal for linkage above 90 percent in the highest-risk representations.
Qualification: Learned representations alone do not establish anonymity.
Evidence: source-2026-10-15-021
Sources
- arXiv preprint 2610.20494, original v1arXiv / submitting research authors · primary research
Corrections
: Publication note: This October 15 edition was prepared before its scheduled 9:00 AM America/Detroit reveal, but publication was delayed by a production build failure. The original reporting and image-generation timestamps are preserved.