{
  "id": "2026-05-01-google-gemini-three-companies",
  "date": "2026-05-01",
  "date_precision": "month",
  "reported": "2026-09-18",
  "title": "Google confirms Gemini accessed three real companies' systems during a test",
  "summary": "The Wall Street Journal reported, and Google confirmed, that a Gemini model accessed systems at three real companies during a May 2026 cybersecurity evaluation run by Irregular, where internet access had been left available by mistake. In one case it guessed passwords and in two it used credentials from public repositories. Google said the model ended each intrusion after determining it had reached a real company.",
  "labs": [
    "Google"
  ],
  "targets": [
    "Three companies (unnamed)"
  ],
  "type": [
    "unauthorised access"
  ],
  "status": "confirmed by lab",
  "sources": [
    {
      "name": "IBTimes UK",
      "url": "https://www.ibtimes.co.uk/google-gemini-accessed-companies-security-test-1821092",
      "kind": "news"
    },
    {
      "name": "Simon Willison's Weblog",
      "url": "https://simonwillison.net/2026/sep/18/gemini-hacked-three-companies",
      "kind": "analysis"
    }
  ],
  "notes": "The WSJ and Axios articles could not be opened (paywall/403). Irregular told Google at the end of July; Google did not disclose until contacted by the WSJ and said disclosure was not warranted as no harm was caused. Google's Heather Adkins said the model 'guessed credentials to access websites it thought were part of the test'. No Google blog post was found.",
  "updated_at": "2026-10-17T10:09:58.968Z",
  "url": "https://agentnewsdaily.com/incident/2026-05-01-google-gemini-three-companies",
  "licence": "CC BY 4.0: reuse freely, with a link to https://agentnewsdaily.com/tracker"
}