MosaicLeaks - Privacy Leakage: leaderboard
Metric: Privacy leakage (%; share of rollouts whose web queries let a StepFun-3.5-Flash adversary answer a private question or state a true private claim about the enterprise documents, mean of three runs; default prompt; lower is better). Source: arxiv.org. Saturation forecast: Around December 2026. 6 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Gemma 4 31B (IT) | 9.7 |
| 2 | Qwen 3 8B | 33.4 |
| 3 | Qwen 3 4B Instruct | 34 |
| 4 | Step 3.5 Flash | 39.6 |
| 5 | GPT-OSS-20B | 42.9 |
Interactive version: theaggregate.ai/benchmark?slug=mosaicleaks-privacy-leakage · How It Works · Data refreshed daily, snapshot 2026-09-26.