Before revision:  When pursuing a retrieval approach, we observe an mAP@R of 0.9748 and a precision@1 of 0.9963  . Based on this high identification rate, a potential attacker may leak patient-related information and additionally cross-reference images to obtain more information.
After revision:  When pursuing a retrieval approach, we observe an mAP@R of 0.9748 and a precision@1 of 0.9963 . Furthermore, we achieve an AUC of up to 0.9870 and a precision@1 of up to 0.9444 when evaluating our trained networks on CheXpert and the COVID-19 Image Data Collection . Based on this high identification rate, a potential attacker may leak patient-related information and additionally cross-reference images to obtain more information.