An attack on a pretrained model that attempts to find the underlying training data.