Agentic LLMs as Powerful Deanonymizers: Re-identification of Participants in the Anthropic Interviewer Dataset
On the map: LLM agents and tool use → Social simulation and multi-agent debate
Abstract (arXiv)
On December 4, 2025, Anthropic released Anthropic Interviewer, an AI tool for running qualitative interviews at scale, along with a public dataset of 1,250 interviews with professionals, including 125 scientists, about their use of AI for research. Focusing on the scientist subset, I show that widely available LLMs with web search and agentic capabilities can link six out of twenty-four interviews to specific scientific works, recovering associated authors and, in some cases, uniquely identifying the interviewees. My contribution is to show that modern LLM-based agents make such re-identification attacks easy and low-effort: off-the-shelf tools can, with a few natural-language prompts, search the web, cross-reference details, and propose likely matches, effectively lowering the technical barrier. Existing safeguards can be bypassed by breaking down the re-identification into benign tasks. I outline the attack at a high level, discuss implications for releasing rich qualitative data in the age of LLM agents, and propose mitigation recommendations and open problems. I have notified Anthropic of my findings.
Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Placed in Social simulation and multi-agent debate, one of 16 directions in LLM agents and tool use. Builds on 2 of its 8 references that are in the map. First posted on arXiv 9 Jan 2026.
Builds on
2 of 8 references.
References · 2
- 2025Position: Privacy Is Not Just Memorization!cited by 17
- 2024Developing Story: Case Studies of Generative AI's Use in Journalismcited by 10
Built on by
Citing papers per year: 2026: 7.
7 papers.
- 2026From Weak Cues to Real Identities: Evaluating Inference-Driven De-Anonymization in LLM Agentscited by 4
- 2026From Fragmentation to Integration: Exploring the Design Space of AI Agents for Human-as-the-Unit Privacy Managementcited by 0
- 2026Boundary-targeted Membership Inference Attacks on Safety Classifierscited by 0
- 2026LLM Anonymization Against Agentic Re-Identificationcited by 0
- 2026AInterviewer: A Platform for Designing and Conducting AI-led Qualitative Interviewscited by 0
- 2026Agentic AI-Powered Re-Identification: An Emerging, Scalable Threat to Mobility Microdata Privacycited by 0
- 2026AgentDoxx: Agentic Re-identification of Anonymized Text with Web Searchcited by 0
- 2026AgentDoxx: Agentic Re-identification of Anonymized Text with Web Search4 Oct 2026
- 2026Agentic AI-Powered Re-Identification: An Emerging, Scalable Threat to Mobility Microdata Privacy26 Jun 2026
- 2026LLM Anonymization Against Agentic Re-Identification29 May 2026
- 2026Boundary-targeted Membership Inference Attacks on Safety Classifiers21 May 2026
- 2026AInterviewer: A Platform for Designing and Conducting AI-led Qualitative Interviews15 May 2026
- 2026From Weak Cues to Real Identities: Evaluating Inference-Driven De-Anonymization in LLM Agents19 Mar 2026
- 2026From Fragmentation to Integration: Exploring the Design Space of AI Agents for Human-as-the-Unit Privacy Management4 Feb 2026
Similar, not cited
Close in wording, no citation either way
- 2026Sound Agentic Science Requires Adversarial Experiments
- 2025MimiTalk: Revolutionizing Qualitative Research with Dual-Agent AI
- 2025Are LLM Agents Behaviorally Coherent? Latent Profiles for Social Simulation
- 2025Deep Research Bench: Evaluating AI Web Research Agents
- 2025The Social Laboratory: A Psychometric Framework for Multi-Agent LLM Evaluation
- 2026LLM Agents as Social Scientists: A Human-AI Collaborative Platform for Social Science Automation
- 2025Towards Scientific Intelligence: A Survey of LLM-based Scientific Agents
- 2026AI Coding Agents in Social Science: Methodologically Diverse, Empirically Consistent, Interpretively Vulnerable