Memorization in Large Language Models in Medicine: Prevalence, Characteristics, and Implications
Not on the map. Why?
Abstract (arXiv)
Large Language Models (LLMs) have demonstrated significant potential in medicine, with many studies adapting them through continued pre-training or fine-tuning on medical data to enhance domain-specific accuracy and safety. However, a key open question remains: to what extent do LLMs memorize medical training data. Memorization can be beneficial when it enables LLMs to retain valuable medical knowledge during domain adaptation. Yet, it also raises concerns. LLMs may inadvertently reproduce sensitive clinical content (e.g., patient-specific details), and excessive memorization may reduce model generalizability, increasing risks of misdiagnosis and making unwarranted recommendations. These risks are further amplified by the generative nature of LLMs, which can not only surface memorized content but also produce overconfident, misleading outputs that may hinder clinical adoption. In this work, we present a study on memorization of LLMs in medicine, assessing its prevalence (how frequently it occurs), characteristics (what is memorized), volume (how much content is memorized), and potential downstream impacts (how memorization may affect medical applications). We systematically analyze common adaptation scenarios: (1) continued pretraining on medical corpora, (2) fine-tuning on standard medical benchmarks, and (3) fine-tuning on real-world clinical data, including over 13,000 unique inpatient records from Yale New Haven Health System. The results demonstrate that memorization is prevalent across all adaptation scenarios and significantly higher than that reported in the general domain. Moreover, memorization has distinct characteristics during continued pre-training and fine-tuning, and it is persistent: up to 87% of content memorized during continued pre-training remains after fine-tuning on new medical tasks.
Key facts. Cited by 5 papers in the map (data through 7 Oct 2026). Builds on 38 of its 97 references that are in the map. First posted on arXiv 10 Sep 2025.
Builds on
38 of 97 references.
References · 38
- 2024The Llama 3 Herd of Modelscited by 14,192
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,462
- 2020Extracting Training Data from Large Language Modelscited by 2,144
- 2022Large Language Models Encode Clinical Knowledgecited by 1,807
- 2020What Disease does this Patient Have? A Large-scale Open Domain Question Answering Dataset from Medical Examscited by 1,324
- 2025gpt-oss-120b & gpt-oss-20b Model Cardcited by 1,258
- 2023Progress measures for grokking via mechanistic interpretabilitycited by 822
- 2022Quantifying Memorization Across Neural Language Modelscited by 755
- 2021BARTScore: Evaluating Generated Text as Text Generationcited by 719
- 2023A Comprehensive Overview of Large Language Modelscited by 639
- 2022MedMCQA : A Large-scale Multi-Subject Multi-Choice Dataset for Medical domain Question Answeringcited by 525
- 2023Scalable Extraction of Training Data from (Production) Language Modelscited by 415
26 more
- 2023Analyzing Leakage of Personally Identifiable Information in Language Modelscited by 278
- 2023MEDITRON-70B: Scaling Medical Pretraining for Large Language Modelscited by 272
- 2023Adapted Large Language Models Can Outperform Medical Experts in Clinical Text Summarizationcited by 244
- 2023Beyond Memorization: Violating Privacy Via Inference with Large Language Modelscited by 167
- 2025A Minimalist Approach to LLM Reasoning: from Rejection Sampling to Reinforcecited by 141
- 2023Towards Accurate Differential Diagnosis with Large Language Modelscited by 115
- 2023Evaluating Open-Domain Question Answering in the Era of Large Language Modelscited by 110
- 2024On Protecting the Data Privacy of Large Language Models (LLMs): A Surveycited by 91
- 2025Medical Hallucinations in Foundation Models and Their Impact on Healthcarecited by 89
- 2021Memorization vs. Generalization: Quantifying Data Leakage in NLP Performance Evaluationcited by 69
- 2024A Systematic Survey of Text Summarization: From Statistical Methods to Large Language Modelscited by 52
- 2024Large Language Models for Disease Diagnosis: A Scoping Reviewcited by 51
- 2021Biomedical Question Answering: A Survey of Approaches and Challengescited by 46
- 2023Exploring Memorization in Fine-tuned Language Modelscited by 44
- 2023Unveiling Memorization in Code Modelscited by 29
- 2023DRG-LLaMA : Tuning LLaMA Model to Predict Diagnosis-related Group for Hospitalized Patientscited by 29
- 2024Undesirable Memorization in Large Language Models: A Surveycited by 29
- 2025Toward Generalizable Evaluation in the LLM Era: A Survey Beyond Benchmarkscited by 26
- 2024Biomedical Large Languages Models Seem not to be Superior to Generalist Models on Unseen Medical Datacited by 21
- 2025A Survey on Model Extraction Attacks and Defenses for Large Language Modelscited by 18
- 2024A Comprehensive Survey on Evaluating Large Language Model Applications in the Medical Industrycited by 17
- 2024Attacks on Third-Party APIs of Large Language Modelscited by 14
- 2024When Fine-Tuning LLMs Meets Data Privacy: An Empirical Study of Federated Learning in LLM-Based Program Repaircited by 10
- 2025LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasurescited by 8
- 2024Clinical Insights: A Comprehensive Review of Language Models in Medicinecited by 6
- 2024Beyond Multiple-Choice Accuracy: Real-World Challenges of Implementing Large Language Models in Healthcarecited by 4
Built on by
Citing papers per year: 2026: 5.
5 papers.
- 2026Toward Federated Large Language Models in Medicine: A Parameter-Efficient Framework for Privacy-Preserving, Multi-Institutional Adaptationcited by 1
- 2026Clinical Note Bloat Reduction for Efficient LLM Usecited by 1
- 2026MedPMC: A Systematic Framework for Scaling High-Fidelity Medical Multimodal Data for Foundation Modelscited by 1
- 2026The Emerging AI Paper-Review Arms Race: Adversarial Co-Evolution in Scholarly Publishingcited by 1
- 2026CLEAR: Cross-Source Evidence Adjudication for Large Language Models in Medicinecited by 0
- 2026CLEAR: Cross-Source Evidence Adjudication for Large Language Models in Medicine14 Sep 2026
- 2026The Emerging AI Paper-Review Arms Race: Adversarial Co-Evolution in Scholarly Publishing7 Sep 2026
- 2026MedPMC: A Systematic Framework for Scaling High-Fidelity Medical Multimodal Data for Foundation Models8 Jul 2026
- 2026Clinical Note Bloat Reduction for Efficient LLM Use21 Mar 2026
- 2026Toward Federated Large Language Models in Medicine: A Parameter-Efficient Framework for Privacy-Preserving, Multi-Institutional Adaptation29 Jan 2026