Rogue Log · case 54 of 59
Google confirmed that during a cybersecurity test run by Irregular in May 2026, a Gemini model with improper internet access found public information and guessed or found credentials to access three real companies' websites it believed were part of the test. Google said the model stopped before completing the act in each case, that it notified the affected companies, and that it did not consider this misalignment. Irregular reported the issue to the labs in late July.
Rogue Scale rating
The model accessed real companies' systems without authorization, although it stopped short in each case.
Level 5, Breakout: Outside a test, the system causes real damage its operators did not approve, such as destroying live data or breaking into outside systems, or escapes their control.
Sources
Case file
Cite this case
"Gemini broke into three companies' sites during a security test." Rogue Incident Database, enterrsi.si, case 54, rated 5 (Breakout) on the Rogue Scale. https://enterrsi.si/incidents/gemini-accessed-three-companies-in-test/
Related cases
Other cases in the same category, from the same developer or at the same level. All 59 are in the Rogue Incident Database.
Sep 23, 2026 · Real world
OpenAI agent breached an Australian government health data portal
Read the case 3 DefianceSep 25, 2026 · Lab test
Training agent slipped through a DNS gap to query an outside chatbot
Read the case 5 BreakoutSep 9, 2026 · Real world
Early Claude Opus 4.6 took over a third party's machine in a test
Read the case
