Tagged:

2 posts

• Cross-Tenant Data Leakage in Multi-Tenant LLM Deployments: Incidents, Architecture, and What to Demand from Providers

  When an LLM service hosts multiple customers on shared infrastructure, failures in conversation isolation, prompt cache sharing, or conversation history storage can expose one customer's data to another. This post covers the documented failure modes, the March 2023 ChatGPT Redis incident, batch inference and system prompt bleed risks, and what enterprise architects should demand from LLM providers before trusting them with sensitive data.

  Jul 15, 2026 llm-security multi-tenant data-leakage inference-infrastructure privacy prompt-caching gdpr enterprise-security defense-patterns

• RAG Privacy Attacks: How Retrieval-Augmented Generation Pipelines Leak Private Documents

  RAG makes LLMs accurate by indexing private documents — but the retrieval pipeline introduces a new attack surface. Adversarial queries can extract document chunks, embedding inversions recover original text, and multi-tenant isolation can fail in ways that expose documents across access boundaries.

  Jul 4, 2026 rag privacy data-exfiltration vector-databases embeddings multi-tenant prompt-injection