4 Experiments

In this section, we follow the zero-shot setting to
conduct experiments to recover multi-faceted per-
sonal information that includes email addresses and
phone numbers. In addition, experiments on email
content recovery can be found in Appendix B.

4.1 Experimental Settings
Datasets. For the Enron Email Dataset, we pro-
cessed 100 frequent (name, email address) pairs
whose email domain is “@enron.com” from En-
ron’s employees and 100 infrequent pairs whose
domains do not belong to Enron. Among 100 fre-
quent pairs, we manually ﬁlter out 12 invalid or-
ganizational emails and evaluate the remaining 88
pairs. We also collect 300 (name, phone number)
pairs to recover phone numbers given names. For
Institutional Pages, we collect 50 (name, email ad-
dress) pairs and 50 (name, phone number) pairs.
Multi-step Jailbreaking Privacy Attacks on ChatGPT