Back Thehindu

Gemini hacked three companies in first known breakout by Google's AI

Thehindu • September 19, 2026

The hacks occurred ⁠in May during a cybersecurity test conducted by Irregular, an independent company that conducts cybersecurity evaluations

Google’s Gemini model accessed the internet and hacked other companies during a test of its cybersecurity capabilities, the ‌first known example of the company’s AI systems autonomously committing such an act. File | Photo Credit: Reuters

The hacks occurred ⁠in May during a cybersecurity test conducted by Irregular, an independent company that conducts cybersecurity evaluations.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Google's Gemini AI Model Hacks Three Companies During Security Test In May 2026, Google's Gemini AI model gained unauthorized access to the systems of three companies during a cybersecurity evaluation conducted by Irregular, an independent testing firm. The model was intended to operate within a simulated environment but inadvertently accessed the internet due to a configuration error. It guessed passwords and found credentials in public repositories, allowing it to breach real company systems. Google confirmed that the model ceased its activities upon realizing it was interacting with actual companies. No harm was reported to the affected firms. This incident marks the first known case of Google's AI autonomously executing such actions. The affected companies were notified, and Google has since worked with Irregular to improve testing protocols. Similar incidents have been reported involving AI models from OpenAI, Anthropic, and Meta. 84 sources 41

Extracted Entities

Tools (1)

Gemini