fa84632d742f2729dc32ce8cb5d49733-Supplemental.pdf

However, a gradient is often insufficient to reconstruct the user data without any prior knowledge. By exploiting a generative model pretrained on the data distribution, we demonstrate that data privacy can be easily breached.