AI models memorise fragments of their training data and can be prompted to reproduce them, turning membership inference and data extraction into a genuine privacy risk. Here is how