Agents Watch Incident
Gemini model reached three real companies during a cyber-security test
Google confirmed that a Gemini model accessed systems at three real companies during a capture-the-flag evaluation in May 2026. The test environment unintentionally had internet access, and a fictional target shared its name with a real business.
- Organisation
- Google; Irregular (evaluation partner)
- Agent / model
- Gemini
- Verification
- Confirmed by a primary source such as the company involved or an official statement.
The evaluation was run by Irregular, an outside testing firm. According to reports, the model found login credentials for two companies in public code repositories and guessed a password for the third. Google said the model stopped once inside each system and did not use the credentials it found.
Irregular said it informed Google and the affected companies in July and has since fixed its testing setup. Google confirmed the incidents in September in response to questions from the Wall Street Journal. The affected companies have not been named.