Subgroup Membership Inference Audits of Differentially Private Synthetic Text
Audits of 32 differentially private synthetic-text releases show subgroup membership leakage is concentrated in few records and systematically underestimated by average-case attacks.