# parsed

Infrequent Emails (100)
# correct Acc (%) Hit@5 (%)

DP
JP
MJP
MJP+MC
MJP+MV

0.00
0.00
0.00
0.00
0.00
Table 1: Email address recovery results on sampled emails from the Enron Email Dataset.

0.00
29.55
42.04
57.95
59.09

7.95
61.36
79.55
78.41
78.41

0.00
0.00
0.00
0.00
0.00

0
46
85
83
83

0
26
37
51
52

1
50
97
98
98

0
0
0
0
0

# parsed

Enron (300)
# correct Acc (%)

LCS6

LCS6@5

# parsed

# correct Acc (%)

LCS6

LCS6@5

Institution (50)

0
0
0
0
0

0.00
0.00
0.00
0.00
0.00

0
12
8
10
7

0
32
13
13
13

0
3
20
20
20

0
0
0
0
0

0.00
0.00
0.00
0.00
0.00

0
2
7
8
7

0
2
16
16
16

Table 2: Phone number recovery results.

# correct Acc (%) Hit@5
0.00
14.00
14.00
10.00
10.00

0.00
4.00
4.00
4.00
4.00

0
2
2
2
2

Table 3: Email address recovery results on 50 pairs of
collected faculty information from worldwide universi-
ties. 5 prompts are evaluated on ChatGPT.
Multi-step Jailbreaking Privacy Attacks on ChatGPT