The Mosaic Memory of Large Language Models
Not on the map. Why?
Abstract (arXiv)
As Large Language Models (LLMs) become widely adopted, understanding how they learn from, and memorize, training data becomes crucial. Memorization in LLMs is widely assumed to only occur as a result of sequences being repeated in the training data. Instead, we show that LLMs memorize by assembling information from similar sequences, a phenomena we call mosaic memory. We show major LLMs to exhibit mosaic memory, with fuzzy duplicates contributing to memorization as much as 0.8 of an exact duplicate and even heavily modified sequences contributing substantially to memorization. Despite models display reasoning capabilities, we somewhat surprisingly show memorization to be predominantly syntactic rather than semantic. We finally show fuzzy duplicates to be ubiquitous in real-world data, untouched by deduplication techniques. Taken together, our results challenge widely held beliefs and show memorization to be a more complex, mosaic process, with real-world implications for privacy, confidentiality, model utility and evaluation.
Key facts. Cited by 9 papers in the map (data through 7 Oct 2026). Builds on 65 of its 118 references that are in the map. First posted on arXiv 24 May 2024.
Builds on
65 of 118 references.
References · 65
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023GPT-4 Technical Reportcited by 18,132
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2022Chain-of-Thought Prompting Elicits Reasoning in Large Language Modelscited by 12,302
- 2021Evaluating Large Language Models Trained on Codecited by 8,053
- 2022PaLM: Scaling Language Modeling with Pathwayscited by 5,304
- 2021Finetuned Language Models Are Zero-Shot Learnerscited by 3,747
- 2021Program Synthesis with Large Language Modelscited by 3,509
- 2023Mistral 7Bcited by 3,065
- 2022Training Compute-Optimal Large Language Modelscited by 2,927
38 more
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2019Fine-Tuning Language Models from Human Preferencescited by 2,124
- 2022Beyond the Imitation Game: Quantifying and extrapolating the capabilities of language modelscited by 1,970
- 2019Language Models as Knowledge Bases?cited by 1,922
- 2019Machine Unlearningcited by 1,020
- 2021GLaM: Efficient Scaling of Language Models with Mixture-of-Expertscited by 890
- 2018The Secret Sharer: Evaluating and Testing Unintended Memorization in Neural Networkscited by 847
- 2019Generalization through Memorization: Nearest Neighbor Language Modelscited by 788
- 2022Quantifying Memorization Across Neural Language Modelscited by 755
- 2023The RefinedWeb Dataset for Falcon LLM: Outperforming Curated Corpora with Web Data, and Web Data Onlycited by 755
- 2021Deduplicating Training Data Makes Language Models Bettercited by 705
- 2016Neural Architectures for Named Entity Recognitioncited by 548
- 2024The WMDP Benchmark: Measuring and Reducing Malicious Use With Unlearningcited by 488
- 2019Does Learning Require Memorization? A Short Tale about a Long Tailcited by 452
- 2022Large Language Models Struggle to Learn Long-Tail Knowledgecited by 452
- 2023DoReMi: Optimizing Data Mixtures Speeds Up Language Model Pretrainingcited by 385
- 2023Detecting Pretraining Data from Large Language Modelscited by 375
- 2023Who's Harry Potter? Approximate Unlearning in LLMscited by 366
- 2022Deduplicating Training Data Mitigates Privacy Risks in Language Modelscited by 309
- 2024BioMistral: A Collection of Open-Source Pretrained Large Language Models for Medical Domainscited by 299
- 2023SemDeDup: Data-efficient learning at web-scale through semantic deduplicationcited by 295
- 2023Analyzing Leakage of Personally Identifiable Information in Language Modelscited by 278
- 2020Approximate Data Deletion from Machine Learning Modelscited by 250
- 2022Transformer Memory as a Differentiable Search Indexcited by 242
- 2022Data Contamination: From Memorization to Exploitationcited by 234
- 2023Proving Test Set Contamination in Black Box Language Modelscited by 227
- 2023Can LLMs Keep a Secret? Testing Privacy Implications of Language Models via Contextual Integrity Theorycited by 218
- 2022What Does it Mean for a Language Model to Preserve Privacy?cited by 194
- 2023MADLAD-400: A Multilingual And Document-Level Large Audited Datasetcited by 180
- 2024Eight Methods to Evaluate Robust Unlearning in LLMscited by 153
- 2022Scaling Laws and Interpretability of Learning from Repeated Datacited by 147
- 2023D4: Improving LLM Pretraining via Document De-Duplication and Diversificationcited by 146
- 2023Investigating Data Contamination in Modern Benchmarks for Large Language Modelscited by 136
- 2018The Adverse Effects of Code Duplication in Machine Learning Models of Codecited by 123
- 2024Generalization or Memorization: Data Contamination and Trustworthy Evaluation for Large Language Modelscited by 119
- 2023Copyright Violations and Large Language Modelscited by 108
- 2023Revisiting Relation Extraction in the era of Large Language Modelscited by 100
- 2023Task Contamination: Language Models May Not Be Few-Shot Anymorecited by 98
50 most cited of 65 All 65 (JSON)
Built on by
Citing papers per year: 2025: 3; 2026: 6.
9 papers.
- 2026Soft Contamination Means Benchmarks Test Shallow Generalizationcited by 8
- 2025Extracting alignment data in open modelscited by 7
- 2026Alignment Whack-a-Mole : Finetuning Activates Verbatim Recall of Copyrighted Books in Large Language Modelscited by 6
- 2025When Tables Leak: Attacking String Memorization in LLM-Based Tabular Data Generationcited by 3
- 2026Byte-Exact Deduplication in Retrieval-Augmented Generation: A Three-Regime Empirical Analysis Across Public Benchmarkscited by 3
- 2026Merlin: Deterministic Byte-Exact Deduplication for Lossless Context Optimization in Large Language Model Inferencecited by 2
- 2025Estimating Model-Level Membership Inference Vulnerability Without Reference Modelscited by 1
- 2026Memorization Dynamics of Fill-in-the-Middle Pretrainingcited by 0
- 2026Detecting Pretraining Data in Large Language Models from a Free-Energy Perspectivecited by 0
- 2026Detecting Pretraining Data in Large Language Models from a Free-Energy Perspective18 Sep 2026
- 2026Memorization Dynamics of Fill-in-the-Middle Pretraining21 May 2026
- 2026Merlin: Deterministic Byte-Exact Deduplication for Lossless Context Optimization in Large Language Model Inference11 May 2026
- 2026Byte-Exact Deduplication in Retrieval-Augmented Generation: A Three-Regime Empirical Analysis Across Public Benchmarks10 May 2026
- 2026Alignment Whack-a-Mole : Finetuning Activates Verbatim Recall of Copyrighted Books in Large Language Models21 Mar 2026
- 2026Soft Contamination Means Benchmarks Test Shallow Generalization12 Feb 2026
- 2025When Tables Leak: Attacking String Memorization in LLM-Based Tabular Data Generation9 Dec 2025
- 2025Estimating Model-Level Membership Inference Vulnerability Without Reference Models22 Oct 2025
- 2025Extracting alignment data in open models21 Oct 2025
Similar, not cited
Close in wording, no citation either way
- 2024Undesirable Memorization in Large Language Models: A Survey
- 2025Analyzing Memorization in Large Language Models through the Lens of Model Attribution
- 2024Generalization v.s. Memorization: Tracing Language Models' Capabilities Back to Pretraining Data
- 2023SoK: Memorization in General-Purpose Large Language Models
- 2024On Memorization of Large Language Models in Logical Reasoning
- 2025Shared Path: Unraveling Memorization in Multilingual LLMs through Language Similarities
- 2022When Not to Trust Language Models: Investigating Effectiveness of Parametric and Non-Parametric Memories
- 2024Memory3: Language Modeling with Explicit Memory