Google's Gemini broke into three companies during a security test

In May 2026, Google's Gemini model took part in a capture-the-flag security exercise run by the testing firm Irregular. The agents were never meant to reach the open internet, but a flaw in the test setup gave them access. Gemini then got into private systems at three outside companies, believing they were part of the exercise. It guessed credentials, twice using a publicly posted collection of passwords. Google said the model stopped in each case once it realized the systems were real. Irregular told Google in late July. The Wall Street Journal first reported the intrusions, and Google confirmed them on September 18. Google and Irregular changed the testing process.