ICLR 2026 Orals

Hubble: a Model Suite to Advance the Study of LLM Memorization

Johnny Wei, Ameya Godbole, Mohammad Aflah Khan, Ryan Yixiang Wang, Xiaoyuan Zhu, James Flemings, Nitya Kashyap, Krishna P. Gummadi, Willie Neiswanger, Robin Jia

Safety, Privacy & Alignment Sat, Apr 25 · 3:39 PM–3:49 PM · 203 A/B Avg rating: 7.50 (6–8)
Author-provided TL;DR

Hubble is a suite of paired LLMs (largest 8B), where the perturbed models are trained in the same way as standard models but with text (e.g. book passages, biographies, and test sets) inserted and designed to emulate key memorization risks.

Abstract

We present Hubble, a suite of fully open-source large language models (LLMs) for the scientific study of LLM memorization. Hubble models come in standard and perturbed variants: standard models are pretrained on a large English corpus, and perturbed models are trained in the same way but with controlled insertion of text (e.g., book passages, biographies, and test sets) designed to emulate key memorization risks. Our core release includes 8 models---standard and perturbed models with 1B or 8B parameters, pretrained on 100B or 500B tokens---establishing that memorization risks are determined by the frequency of sensitive data relative to size of the training corpus (i.e., a password appearing once in a smaller corpus is memorized better than the same password in a larger corpus). Our release also includes 6 perturbed models with text inserted at different pretraining phases, showing that sensitive data without continued exposure can be forgotten. These findings suggest two best practices for addressing memorization risks: to dilute sensitive data by increasing the size of the training corpus, and to order sensitive data to appear earlier in training. Beyond these general empirical findings, Hubble enables a broad range of memorization research; for example, analyzing the biographies reveals how readily different types of private information are memorized. We also demonstrate that the randomized insertions in Hubble make it an ideal testbed for membership inference and machine unlearning, and invite the community to further explore, benchmark, and build upon our work.

One-sentence summary·Auto-generated by claude-haiku-4-5-20251001(?)

Releases Hubble suite of open-source LLMs with controlled perturbed variants to systematically study memorization risks.

Contributions·Auto-generated by claude-haiku-4-5-20251001(?)
  • Suite of 8 fully open-source LLMs with standard and perturbed variants for memorization research
  • Establishes memorization risks determined by relative frequency of sensitive data to training corpus size
  • Demonstrates sensitive data without continued exposure can be forgotten through models trained at different pretraining phases
Methods used·Auto-generated by claude-haiku-4-5-20251001(?)
  • Language model pretraining
  • Membership inference
  • Machine unlearning evaluation
  • Privacy analysis
Datasets used·Auto-generated by claude-haiku-4-5-20251001(?)
  • Large English corpus
Limitations (author-stated)·Auto-generated by claude-haiku-4-5-20251001(?)

Authors did not state explicit limitations.

Future work (author-stated)·Auto-generated by claude-haiku-4-5-20251001(?)

Authors did not state explicit future directions.

Author keywords

  • memorization
  • copyright
  • privacy
  • test set contamination
  • membership inference
  • unlearning

Related orals

Something off? Let us know →