Linkage Attacks Expose Identity Risks in Public ECG Data Sharing

• URL: http://arxiv.org/abs/2508.15850v1
• Date: Wed, 20 Aug 2025 05:52:10 GMT
• Title: Linkage Attacks Expose Identity Risks in Public ECG Data Sharing
• Abstract summary: We evaluate privacy risks under realistic conditions where attackers operate with partial knowledge.<n>Our approach achieves 85% accuracy in re-identifying individuals in public datasets.
• Score: 4.452543616855779
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: The increasing availability of publicly shared electrocardiogram (ECG) data raises critical privacy concerns, as its biometric properties make individuals vulnerable to linkage attacks. Unlike prior studies that assume idealized adversarial capabilities, we evaluate ECG privacy risks under realistic conditions where attackers operate with partial knowledge. Using data from 109 participants across diverse real-world datasets, our approach achieves 85% accuracy in re-identifying individuals in public datasets while maintaining a 14.2% overall misclassification rate at an optimal confidence threshold, with 15.6% of unknown individuals misclassified as known and 12.8% of known individuals misclassified as unknown. These results highlight the inadequacy of simple anonymization techniques in preventing re-identification, demonstrating that even limited adversarial knowledge enables effective identity linkage. Our findings underscore the urgent need for privacy-preserving strategies, such as differential privacy, access control, and encrypted computation, to mitigate re-identification risks while ensuring the utility of shared biosignal data in healthcare applications.

Related papers

• XR-PRISM: Data-Driven Privacy and Risk Impact Scoring Metric for Extended Reality in Healthcare [1.5469452301122175]
  Extended Reality (XR) technologies are transforming healthcare through immersive training, remote consultation, and patient rehabilitation.<n> XR-PRISM integrates threat likelihood, system vulnerability, attack surface, safety impact, privacy impact, and control effectiveness into a single actionable risk score.
  arXiv  Detail & Related papers  (2026-08-01T19:04:55Z)
• AI-generated Images Challenge Visual Trust in High-risk Scenarios [79.40239296310791]
  We introduce SafeIMG, a safety-oriented benchmark spanning 12 public- and individual-safety scenarios generated using GPT Image 2.<n>SafeIMG evaluates whether detectors recognise synthetic images, but also whether their decisions reflect human-identified anomalies.<n>We evaluate specialized synthetic-image detectors and vision-language models (VLMs), and find that neither provides reliable detection.
  arXiv  Detail & Related papers  (2026-07-23T06:56:49Z)
• Agentic AI-Powered Re-Identification: An Emerging, Scalable Threat to Mobility Microdata Privacy [0.0]
  We present an end-to-end pipeline in which agents autonomously search the open web, cross-grained public records and social media.<n>We evaluate the pipeline on a-temporal dataset containing simulated location points anchored at and around home and work addresses.
  arXiv  Detail & Related papers  (2026-06-26T10:27:52Z)
• Your Privacy Depends on Others: Collusion Vulnerabilities in Individual Differential Privacy [50.66105844449181]
  Individual Differential Privacy (iDP) promises users control over their privacy, but this promise can be broken in practice.<n>We reveal a previously overlooked vulnerability in sampling-based iDP mechanisms.<n>We propose $(varepsilon_i,_i,overline)$-iDP a privacy contract that uses $$-divergences to provide users with a hard upper bound on their excess vulnerability.
  arXiv  Detail & Related papers  (2026-01-19T10:26:12Z)
• SynQP: A Framework and Metrics for Evaluating the Quality and Privacy Risk of Synthetic Data [4.73374389278596]
  We introduce SynQP, an open framework for privacy benchmarking in synthetic data generation.<n>We also highlight the need for privacy metrics that fairly account for the probabilistic nature of machine learning models.<n>Our work provides a critical tool for improving the transparency and reliability of privacy evaluations.
  arXiv  Detail & Related papers  (2026-01-17T17:51:14Z)
• Assessing metadata privacy in neuroimaging [2.176772544213644]
  We reviewed data from six neuroimaging datasets openly available on OpenNeuro.<n>We found that privacy is generally well maintained, with serious vulnerabilities being rare.<n>We outline practical measures to address these risks, enabling safer data sharing practices.
  arXiv  Detail & Related papers  (2025-09-18T12:56:03Z)
• On the MIA Vulnerability Gap Between Private GANs and Diffusion Models [51.53790101362898]
  Generative Adversarial Networks (GANs) and diffusion models have emerged as leading approaches for high-quality image synthesis.<n>We present the first unified theoretical and empirical analysis of the privacy risks faced by differentially private generative models.
  arXiv  Detail & Related papers  (2025-09-03T14:18:22Z)
• A False Sense of Privacy: Evaluating Textual Data Sanitization Beyond Surface-level Privacy Leakage [77.83757117924995]
  We propose a new framework that evaluates re-identification attacks to quantify individual privacy risks upon data release.<n>Our approach shows that seemingly innocuous auxiliary information can be used to infer sensitive attributes like age or substance use history from sanitized data.
  arXiv  Detail & Related papers  (2025-04-28T01:16:27Z)
• TransECG: Leveraging Transformers for Explainable ECG Re-identification Risk Analysis [3.0116875872058584]
  We introduce TransECG, a Vision Transformer (ViT)-based method to pinpoint critical ECG segments associated with re-identification tasks like gender, age, and participant ID.<n>Our approach demonstrates high accuracy (89.9% for gender, 89.9% for age, and 88.6% for ID re-identification) across four real-world datasets with 87 participants.
  arXiv  Detail & Related papers  (2025-03-11T07:37:56Z)
• Investigating Vulnerabilities of GPS Trip Data to Trajectory-User Linking Attacks [49.1574468325115]
  We propose a novel attack to reconstruct user identifiers in GPS trip datasets consisting of single trips.<n>We show that the risk of re-identification is significant even when personal identifiers have been removed.<n>Further investigations indicate that users who frequently visit locations that are only visited by a small number of others tend to be more vulnerable to re-identification.
  arXiv  Detail & Related papers  (2025-02-12T08:54:49Z)
• Real-Time Privacy Risk Measurement with Privacy Tokens for Gradient Leakage [15.700803673467641]
  Deep learning models in privacy-sensitive domains have amplified concerns regarding privacy risks.<n>We propose the concept of privacy tokens, which are derived directly from private gradients during training.<n>Privacy tokens offer valuable insights into the extent of private information leakage from training data.<n>We employ Mutual Information (MI) as a robust metric to quantify the relationship between training data and gradients.
  arXiv  Detail & Related papers  (2025-02-05T06:20:20Z)
• ECG Unveiled: Analysis of Client Re-identification Risks in Real-World ECG Datasets [3.5393407453410846]
  We conduct an empirical analysis of identity re-identification risks using ECG data from five diverse real-world datasets. Our approach provides valuable insights for clinical experts and guides the development of effective privacy-preserving mechanisms.
  arXiv  Detail & Related papers  (2024-08-02T19:24:55Z)
• GaitGuard: Towards Private Gait in Mixed Reality [3.2392550445029396]
  We present GaitGuard, a real-time system that protects gait privacy against video-based gait extraction attacks in MR environments.<n>We compare and combine multiple mitigation techniques, offering guidance to navigate the privacy-utility tradeoff.
  arXiv  Detail & Related papers  (2023-12-07T17:42:04Z)
• Towards Blockchain-Assisted Privacy-Aware Data Sharing For Edge Intelligence: A Smart Healthcare Perspective [19.208368632576153]
  Linkage attack is a type of dominant attack in the privacy domain. adversaries launch poisoning attacks to falsify the health data, which leads to misdiagnosing or even physical damage. To protect private health data, we propose a personalized differential privacy model based on the trust levels among users.
  arXiv  Detail & Related papers  (2023-06-29T02:06:04Z)
• Releasing survey microdata with exact cluster locations and additional privacy safeguards [77.34726150561087]
  We propose an alternative microdata dissemination strategy that leverages the utility of the original microdata with additional privacy safeguards. Our strategy reduces the respondents' re-identification risk for any number of disclosed attributes by 60-80% even under re-identification attempts.
  arXiv  Detail & Related papers  (2022-05-24T19:37:11Z)
• Epidemic mitigation by statistical inference from contact tracing data [61.04165571425021]
  We develop Bayesian inference methods to estimate the risk that an individual is infected. We propose to use probabilistic risk estimation in order to optimize testing and quarantining strategies for the control of an epidemic. Our approaches translate into fully distributed algorithms that only require communication between individuals who have recently been in contact.
  arXiv  Detail & Related papers  (2020-09-20T12:24:45Z)
• COVI White Paper [67.04578448931741]
  Contact tracing is an essential tool to change the course of the Covid-19 pandemic. We present an overview of the rationale, design, ethical considerations and privacy strategy of COVI,' a Covid-19 public peer-to-peer contact tracing and risk awareness mobile application developed in Canada.
  arXiv  Detail & Related papers  (2020-05-18T07:40:49Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.