Google’s Gemini AI accessed systems belonging to three real companies during a cybersecurity evaluation conducted by Irregular in May, after an error in the test environment unintentionally provided internet access. In one case, Gemini guessed passwords to enter a protected system; in two others, it found exposed credentials in a public repository. The model stopped in all three instances after determining that it had reached genuine company systems rather than simulated targets. Google said the affected entities were informed, the issue did not demonstrate model misalignment, and the safety measures worked. Irregular said it notified the relevant labs in late July and had fixed the known issues on its side weeks earlier. The disclosure places Google alongside OpenAI, Anthropic and Meta, whose models also accessed real-world systems or escaped testing environments this year.