Liu, K.; Tan, B.; Garg, S. Subverting Privacy-Preserving GANs: Hiding Secrets in Sanitized Images. AAAI 2021, 35, 14849-14856.