Elephants Never Forget: Memorization and Learning of Tabular Data in Large Language Models
Not on the map. Why?
Abstract (arXiv)
While many have shown how Large Language Models (LLMs) can be applied to a diverse set of tasks, the critical issues of data contamination and memorization are often glossed over. In this work, we address this concern for tabular data. Specifically, we introduce a variety of different techniques to assess whether a language model has seen a tabular dataset during training. This investigation reveals that LLMs have memorized many popular tabular datasets verbatim. We then compare the few-shot learning performance of LLMs on datasets that were seen during training to the performance on datasets released after training. We find that LLMs perform better on datasets seen during training, indicating that memorization leads to overfitting. At the same time, LLMs show non-trivial performance on novel datasets and are surprisingly robust to data transformations. We then investigate the in-context statistical learning abilities of LLMs. While LLMs are significantly better than random at solving statistical classification problems, the sample efficiency of few-shot learning lags behind traditional statistical learning algorithms, especially as the dimension of the problem increases. This suggests that much of the observed few-shot performance on novel real-world datasets is due to the LLM's world knowledge. Overall, our results highlight the importance of testing whether an LLM has seen an evaluation dataset during pre-training. We release the https://github.com/interpretml/LLM-Tabular-Memorization-Checker Python package to test LLMs for memorization of tabular datasets.
Key facts. Cited by 36 papers in the map (data through 14 Oct 2026). Builds on 46 of its 59 references that are in the map. First posted on arXiv 9 Apr 2024.
Builds on
46 of 59 references.
References · 46
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2023GPT-4 Technical Reportcited by 18,396
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 13,028
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,459
- 2016XGBoost: A Scalable Tree Boosting Systemcited by 5,166
- 2023Sparks of Artificial General Intelligence: Early experiments with GPT-4cited by 2,592
- 2020Extracting Training Data from Large Language Modelscited by 2,189
- 2023A Survey on Multimodal Large Language Modelscited by 909
- 2021Membership Inference Attacks From First Principlescited by 878
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 864
- 2022Quantifying Memorization Across Neural Language Modelscited by 763
- 2022Transformers learn in-context by gradient descentcited by 732
34 more
- 2022What Can Transformers Learn In-Context? A Case Study of Simple Function Classescited by 715
- 2023Time-LLM: Time Series Forecasting by Reprogramming Large Language Modelscited by 700
- 2023Capabilities of GPT-4 on Medical Challenge Problemscited by 638
- 2024OLMo: Accelerating the Science of Language Modelscited by 613
- 2014OpenML: networked science in machine learningcited by 526
- 2023Faith and Fate: Limits of Transformers on Compositionalitycited by 503
- 2021Retiring Adult: New Datasets for Fair Machine Learningcited by 449
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 434
- 2023Larger language models do in-context learning differentlycited by 394
- 2020Label-Only Membership Inference Attackscited by 388
- 2023Detecting Pretraining Data from Large Language Modelscited by 387
- 2022Language Models are Realistic Tabular Data Generatorscited by 294
- 2022TabLLM: Few-shot Classification of Tabular Data with Large Language Modelscited by 277
- 2023Exploring the Potential of Large Language Models (LLMs) in Learning on Graphscited by 274
- 2023Membership Inference Attacks against Language Models via Neighbourhood Comparisoncited by 258
- 2023Reasoning or Reciting? Exploring the Capabilities and Limitations of Language Models Through Counterfactual Taskscited by 246
- 2022Data Contamination: From Memorization to Exploitationcited by 236
- 2023Transformers as Algorithms: Generalization and Stability in In-context Learningcited by 222
- 2023Rethinking Benchmark and Contamination for Language Models with Rephrased Samplescited by 195
- 2024Do Membership Inference Attacks Work on Large Language Models?cited by 195
- 2023Embers of Autoregression: Understanding Large Language Models Through the Problem They are Trained to Solvecited by 178
- 2022Quantifying Privacy Risks of Masked Language Models Using Membership Inference Attackscited by 175
- 2022Can Foundation Models Wrangle Your Data?cited by 175
- 2022LIFT: Language-Interfaced Fine-Tuning for Non-Language Machine Learning Taskscited by 148
- 2023Emergent and Predictable Memorization in Large Language Modelscited by 148
- 2023Large Language Models for Automated Data Science: Introducing CAAFE for Context-Aware Automated Feature Engineeringcited by 127
- 2023Speak, Memory: An Archaeology of Books Known to ChatGPT/GPT-4cited by 125
- 2023Table Meets LLM: Can Large Language Models Understand Structured Table Data? A Benchmark and Empirical Studycited by 116
- 2023Task Contamination: Language Models May Not Be Few-Shot Anymorecited by 99
- 2024Investigating Data Contamination for Pre-training Language Modelscited by 91
- 2023Understanding In-Context Learning in Transformers and LLMs by Learning to Learn Discrete Functionscited by 63
- 2021Membership Inference on Word Embedding and Beyondcited by 35
- 2024Data Science with LLMs and Interpretable Modelscited by 8
- 2023Adapting Pretrained Language Models for Solving Tabular Prediction Problems in the Electronic Health Recordcited by 5
Built on by
Citing papers per year: 2024: 10; 2025: 16; 2026: 10.
36 papers.
Sort:
By area:
- 2025LLM-FE: Automated Feature Engineering for Tabular Data with LLMs as Evolutionary Optimizerscited by 38
- 2024Easy Problems That LLMs Get Wrongcited by 30
- 2024Undesirable Memorization in Large Language Models: A Surveycited by 29
- 2024Eureka: Evaluating and Understanding Large Foundation Modelscited by 18
- 2025TabSTAR: A Tabular Foundation Model for Tabular Data with Text Fieldscited by 18
- 2024AutoElicit: Using Large Language Models for Expert Prior Elicitation in Predictive Modellingcited by 15
- 2024How Much Can We Forget about Data Contamination?cited by 14
- 2024Measuring memorization in RLHF for code completioncited by 13
- 2025LLM Embeddings for Deep Learning on Tabular Datacited by 12
- 2025Starjob: Dataset for LLM-Driven Job Shop Schedulingcited by 12
- 2024GoNoGo: An Efficient LLM-based Multi-Agent System for Streamlining Automotive Software Release Decision-Makingcited by 6
- 2025ParaPO: Aligning Language Models to Reduce Verbatim Reproduction of Pre-training Datacited by 6
24 more
- 2025An Investigation of Memorization Risk in Healthcare Foundation Modelscited by 5
- 2024Adapting Large Multimodal Models to Distribution Shifts: The Role of In-Context Learningcited by 4
- 2024Uncovering Latent Memories: Assessing Data Leakage and Memorization Patterns in Frontier AI Modelscited by 4
- 2024Beyond Multiple-Choice Accuracy: Real-World Challenges of Implementing Large Language Models in Healthcarecited by 4
- 2026FAMOSE: A ReAct Approach to Automated Feature Discoverycited by 4
- 2025Tabular Feature Discovery With Reasoning Type Explorationcited by 3
- 2025MachineLearningLM: Scaling Many-shot In-context Learning via Continued Pretrainingcited by 3
- 2025When Large Language Models Know the Table: A Framework for Assessing Data Contamination in Tabular Datasetscited by 3
- 2025When Tables Leak: Attacking String Memorization in LLM-Based Tabular Data Generationcited by 3
- 2025Large Language Models Could Be Rote Learnerscited by 2
- 2025Mirage of Mastery: Memorization Tricks LLMs into Artificially Inflated Self-Knowledgecited by 2
- 2025Reasoning about Affordances: Causal and Compositional Reasoning in LLMscited by 1
- 2025TabReason: A Reinforcement Learning-Enhanced Reasoning LLM for Explainable Tabular Data Predictioncited by 1
- 2026Human-LLM Collaborative Feature Engineering for Tabular Datacited by 1
- 2025Summarize-Exemplify-Reflect: Data-driven Insight Distillation Empowers LLMs for Few-shot Tabular Classificationcited by 0
- 2025Limited Reference, Reliable Generation: A Two-Component Framework for Tabular Data Generation in Low-Data Regimescited by 0
- 2026Calibrated Confidence Estimation for Tabular Question Answeringcited by 0
- 2026LLM-Metrics: Measuring Research Impact Through Large Language Model Memorycited by 0
- 2026Proxy reliance in large language model decisions is uncalibrated to predictive evidencecited by 0
- 2026The Illusion of Replacement: Rethinking Specialized Machine Learning Models in the Foundation Model Eracited by 0
- 2026SleuthBench: Benchmarking Statistical LLM Evaluation Using Tabular Hidden Signalscited by 0
- 2026Marginal Response Surface Elicitation for Zero-Label Tabular Learningcited by 0
- 2026The Silent Failures in Agentic Data Sciencecited by 0
- 2026TILE: Bridging LLMs and Table Foundation Models for Tabular Learning with Stringscited by 0
- 2026TILE: Bridging LLMs and Table Foundation Models for Tabular Learning with Strings12 Oct 2026
- 2026The Silent Failures in Agentic Data Science9 Oct 2026
- 2026Marginal Response Surface Elicitation for Zero-Label Tabular Learning30 Sep 2026
- 2026SleuthBench: Benchmarking Statistical LLM Evaluation Using Tabular Hidden Signals28 Sep 2026
- 2026The Illusion of Replacement: Rethinking Specialized Machine Learning Models in the Foundation Model Era29 Aug 2026
- 2026Proxy reliance in large language model decisions is uncalibrated to predictive evidence24 Aug 2026
- 2026LLM-Metrics: Measuring Research Impact Through Large Language Model Memory21 May 2026
- 2026Calibrated Confidence Estimation for Tabular Question Answering14 Apr 2026
- 2026FAMOSE: A ReAct Approach to Automated Feature Discovery19 Feb 2026
- 2026Human-LLM Collaborative Feature Engineering for Tabular Data28 Jan 2026
- 2025When Tables Leak: Attacking String Memorization in LLM-Based Tabular Data Generation9 Dec 2025
- 2025When Large Language Models Know the Table: A Framework for Assessing Data Contamination in Tabular Datasets23 Oct 2025
24 more
- 2025An Investigation of Memorization Risk in Healthcare Foundation Models14 Oct 2025
- 2025Limited Reference, Reliable Generation: A Two-Component Framework for Tabular Data Generation in Low-Data Regimes12 Sep 2025
- 2025MachineLearningLM: Scaling Many-shot In-context Learning via Continued Pretraining8 Sep 2025
- 2025Summarize-Exemplify-Reflect: Data-driven Insight Distillation Empowers LLMs for Few-shot Tabular Classification29 Aug 2025
- 2025Tabular Feature Discovery With Reasoning Type Exploration25 Jun 2025
- 2025Mirage of Mastery: Memorization Tricks LLMs into Artificially Inflated Self-Knowledge23 Jun 2025
- 2025TabReason: A Reinforcement Learning-Enhanced Reasoning LLM for Explainable Tabular Data Prediction27 May 2025
- 2025TabSTAR: A Tabular Foundation Model for Tabular Data with Text Fields23 May 2025
- 2025ParaPO: Aligning Language Models to Reduce Verbatim Reproduction of Pre-training Data20 Apr 2025
- 2025Large Language Models Could Be Rote Learners11 Apr 2025
- 2025LLM-FE: Automated Feature Engineering for Tabular Data with LLMs as Evolutionary Optimizers18 Mar 2025
- 2025Starjob: Dataset for LLM-Driven Job Shop Scheduling26 Feb 2025
- 2025Reasoning about Affordances: Causal and Compositional Reasoning in LLMs23 Feb 2025
- 2025LLM Embeddings for Deep Learning on Tabular Data17 Feb 2025
- 2024AutoElicit: Using Large Language Models for Expert Prior Elicitation in Predictive Modelling26 Nov 2024
- 2024Beyond Multiple-Choice Accuracy: Real-World Challenges of Implementing Large Language Models in Healthcare24 Oct 2024
- 2024How Much Can We Forget about Data Contamination?4 Oct 2024
- 2024Undesirable Memorization in Large Language Models: A Survey3 Oct 2024
- 2024Eureka: Evaluating and Understanding Large Foundation Models13 Sep 2024
- 2024GoNoGo: An Efficient LLM-based Multi-Agent System for Streamlining Automotive Software Release Decision-Making19 Aug 2024
- 2024Uncovering Latent Memories: Assessing Data Leakage and Memorization Patterns in Frontier AI Models20 Jun 2024
- 2024Measuring memorization in RLHF for code completion17 Jun 2024
- 2024Easy Problems That LLMs Get Wrong30 May 2024
- 2024Adapting Large Multimodal Models to Distribution Shifts: The Role of In-Context Learning20 May 2024
- 2024Easy Problems That LLMs Get Wrongcited by 30
- 2025Tabular Feature Discovery With Reasoning Type Explorationcited by 3
- 2025MachineLearningLM: Scaling Many-shot In-context Learning via Continued Pretrainingcited by 3
- 2025Reasoning about Affordances: Causal and Compositional Reasoning in LLMscited by 1
- 2025TabReason: A Reinforcement Learning-Enhanced Reasoning LLM for Explainable Tabular Data Predictioncited by 1
- 2025MachineLearningLM: Scaling Many-shot In-context Learning via Continued Pretraining8 Sep 2025
- 2025Tabular Feature Discovery With Reasoning Type Exploration25 Jun 2025
- 2025TabReason: A Reinforcement Learning-Enhanced Reasoning LLM for Explainable Tabular Data Prediction27 May 2025
- 2025Reasoning about Affordances: Causal and Compositional Reasoning in LLMs23 Feb 2025
- 2024Easy Problems That LLMs Get Wrong30 May 2024
- 2025LLM-FE: Automated Feature Engineering for Tabular Data with LLMs as Evolutionary Optimizerscited by 38
- 2024Undesirable Memorization in Large Language Models: A Surveycited by 29
- 2024Eureka: Evaluating and Understanding Large Foundation Modelscited by 18
- 2025TabSTAR: A Tabular Foundation Model for Tabular Data with Text Fieldscited by 18
- 2024AutoElicit: Using Large Language Models for Expert Prior Elicitation in Predictive Modellingcited by 15
- 2024How Much Can We Forget about Data Contamination?cited by 14
- 2025LLM Embeddings for Deep Learning on Tabular Datacited by 12
- 2025Starjob: Dataset for LLM-Driven Job Shop Schedulingcited by 12
- 2025An Investigation of Memorization Risk in Healthcare Foundation Modelscited by 5
- 2024Uncovering Latent Memories: Assessing Data Leakage and Memorization Patterns in Frontier AI Modelscited by 4
- 2024Beyond Multiple-Choice Accuracy: Real-World Challenges of Implementing Large Language Models in Healthcarecited by 4
- 2026FAMOSE: A ReAct Approach to Automated Feature Discoverycited by 4
12 most cited of 26 All 26 (JSON)
- 2026TILE: Bridging LLMs and Table Foundation Models for Tabular Learning with Strings12 Oct 2026
- 2026Marginal Response Surface Elicitation for Zero-Label Tabular Learning30 Sep 2026
- 2026SleuthBench: Benchmarking Statistical LLM Evaluation Using Tabular Hidden Signals28 Sep 2026
- 2026The Illusion of Replacement: Rethinking Specialized Machine Learning Models in the Foundation Model Era29 Aug 2026
- 2026Proxy reliance in large language model decisions is uncalibrated to predictive evidence24 Aug 2026
- 2026LLM-Metrics: Measuring Research Impact Through Large Language Model Memory21 May 2026
- 2026Calibrated Confidence Estimation for Tabular Question Answering14 Apr 2026
- 2026FAMOSE: A ReAct Approach to Automated Feature Discovery19 Feb 2026
- 2026Human-LLM Collaborative Feature Engineering for Tabular Data28 Jan 2026
- 2025When Tables Leak: Attacking String Memorization in LLM-Based Tabular Data Generation9 Dec 2025
- 2025When Large Language Models Know the Table: A Framework for Assessing Data Contamination in Tabular Datasets23 Oct 2025
- 2025An Investigation of Memorization Risk in Healthcare Foundation Models14 Oct 2025
12 newest of 26 All 26 (JSON)