Google Gemini hacked three companies during cybersecurity test

Google Gemini hacked three companies during cybersecurity test
The Google logo is displayed during a press conference in Berlin, Germany, 11 November 2025.
Reuters

Google’s Gemini AI model accessed the internet and hacked three companies during a cybersecurity test, in what is believed to be the first known case of the company’s AI systems autonomously carrying out such activity.

The hacks took place in May during a cybersecurity evaluation conducted by Irregular, an independent company that tests AI systems.

During the test, Gemini found publicly available information online and guessed credentials that allowed it to access three websites it believed were within the scope of the evaluation, according to Heather Adkins, Google’s vice-president of security engineering.

Google said it informed the three companies involved and worked with its training partner to make changes to its testing processes.

“These events highlight the importance of training powerful AI models to act responsibly,” Ms Adkins said.

Other AI companies report similar incidents

An Irregular spokesperson said the same issue had affected other AI companies and that relevant firms were notified in late July. The spokesperson said all known issues had since been resolved.

Similar incidents linked to Irregular have been disclosed by Meta, Anthropic and OpenAI. Meta said in August that one incident did not involve a sandbox escape or a sophisticated cyberattack. Irregular said it was working on best practices for conducting AI cybersecurity evaluations securely.

The incidents have raised questions about the safeguards needed as AI agents become more autonomous and gain access to the internet and computer systems.

According to the Wall Street Journal, which first reported the news, Gemini guessed passwords until it gained access to a protected system in one case.

In two others, it found credentials in a public repository and used them to access protected systems.

Ms Adkins said Gemini stopped its hacking activity in all three cases.

Read more: 

Tags