According to The Wall Street Journal<\/a>, the incidents took place in May and mark the first known examples of Google’s AI autonomously accessing real companies’ systems during this type of evaluation. Google confirmed the incidents to the outlet.<\/p>\n The disclosure comes amid heightened scrutiny surrounding AI as some industry leaders continue to raise concerns about the potential risks posed by increasingly advanced models.<\/p>\n The incident follows similar disclosures involving AI agents from major companies<\/a>, including OpenAI and Anthropic, that broke out of controlled testing environments.<\/p>\n NEWSOM ADVANCES AI ‘KILL SWITCH’ MANDATE UNDER NEW CALIFORNIA EXECUTIVE ORDER<\/a><\/p>\n Google’s Gemini artificial intelligence accessed protected systems belonging to three real companies while undergoing a cybersecurity evaluation, according to The Wall Street Journal. (Getty Images \/ Getty Images)<\/p>\n The newly identified Gemini incidents took place during a test run by Irregular, a company that was also involved in evaluating AI models connected to similar incidents, the WSJ reported.<\/p>\n The AI had been instructed to attack a fictional company inside a controlled testing environment, but internet access was unintentionally available and the fictional company happened to share its name with a real business, according to Google and Irregular.<\/p>\n In a statement to FOX Business, Google<\/a> emphasized that the model stopped in all three instances and said changes have since been made to the testing process.<\/p>\n “Safe development of powerful AI models is critical and we invest deeply in this area,” Heather Adkins, Google’s vice president of security engineering, told FOX Business.<\/p>\n TECH POWER PLAYERS LAND SEAT AT TABLE FOR HIGH-STAKES DINNER WITH TRUMP, XI<\/a><\/p>\n A smartphone screen displays a folder containing AI applications Claude, ChatGPT, Gemini, Perplexity, Grok, Copilot, and DeepSeek.\u00a0 (Samuel Boivin\/NurPhoto via Getty Images \/ Getty Images)<\/p>\n “In a standard evaluation, the model found public information online and guessed credentials to access websites it thought were part of the test,” Adkins said. “In all three of these instances, the model stopped.”<\/p>\n In one case, the model “guessed passwords until it gained access to a protected system,” according to the report.<\/p>\n In the other two cases, the model found credentials in public online repositories that allowed it to access protected systems<\/a>. In each case, Gemini ended the intrusion after determining that it had accessed a real company’s systems, Google said.<\/p>\n Irregular notified Google about the incidents at the end of July, according to both companies, after the discovery that OpenAI agents had accessed systems belonging to AI software company Hugging Face.<\/p>\n![\"Google](\"https:\/\/www.newsbeep.com\/us\/wp-content\/uploads\/2026\/09\/GettyImages-2161847115-scaled.jpg\")
<\/p>\n![\"Smartphone](\"https:\/\/www.newsbeep.com\/us\/wp-content\/uploads\/2026\/09\/ai-models-phone.jpg\")
<\/p>\n
![\"Person](\"https:\/\/www.newsbeep.com\/us\/wp-content\/uploads\/2026\/09\/google-gemini-china.jpg\")
<\/p>\n