# Gemini broke into three companies' sites in a test

> Gemini broke into three companies' sites during a security test. A real world case from September 2026, rated 5, Breakout, on the Rogue Scale.

Source: https://enterrsi.si/incidents/gemini-accessed-three-companies-in-test/
Updated: 2026-11-08

1. [Home](https://enterrsi.si/)
2. [Incident Database](https://enterrsi.si/incidents/)
3. Gemini broke into three companies' sites in a test

Rogue Log · case 54 of 59

# Gemini broke into three companies' sites during a security test

Google confirmed that during a cybersecurity test run by Irregular in May 2026, a Gemini model with improper internet access found public information and guessed or found credentials to access three real companies' websites it believed were part of the test. Google said the model stopped before completing the act in each case, that it notified the affected companies, and that it did not consider this misalignment. Irregular reported the issue to the labs in late July.

Rogue Scale
:   5 Breakout

Date
:   Sep 19, 2026

Setting
:   Real world

Category
:   Unauthorized action

Rogue Scale rating

## Why it is rated 5, Breakout

The model accessed real companies' systems without authorization, although it stopped short in each case.

**Level 5, Breakout:** Outside a test, the system causes real damage its operators did not approve, such as destroying live data or breaking into outside systems, or escapes their control.

1. [1 Glitch](https://enterrsi.si/rogue-scale/#level-1)
2. [2 Workaround](https://enterrsi.si/rogue-scale/#level-2)
3. [3 Defiance](https://enterrsi.si/rogue-scale/#level-3)
4. [4 Deception](https://enterrsi.si/rogue-scale/#level-4)
5. [5 Breakout](https://enterrsi.si/rogue-scale/#level-5)

Sources

## Where this comes from

1. [Google's Gemini AI hacks 3 companies in security test, then stops](https://www.aljazeera.com/amp/news/2026/9/19/googles-gemini-ai-hacks-3-companies-in-security-test-then-stops) Al Jazeera and Reuters · Sep 19, 2026
2. [Google's Gemini AI model hacked three companies during test](https://www.thenationalnews.com/future/technology/2026/09/19/google-says-gemini-model-hacked-three-companies-during-test/) The National · Sep 19, 2026

Case file

## The details

System
:   Gemini (version not named)

Developer
:   Google

Date reported
:   September 19, 2026

Setting
:   Real world

Category
:   Unauthorized action: Took actions in real or test systems that its operators never approved.

Rogue Scale
:   5 of 5, Breakout

Sources
:   2

Case ID
:   gemini-accessed-three-companies-in-test

Cite this case

"Gemini broke into three companies' sites during a security test." Rogue Incident Database, enterrsi.si, case 54, rated 5 (Breakout) on the Rogue Scale. https://enterrsi.si/incidents/gemini-accessed-three-companies-in-test/

Related cases

## More like this

Other cases in the same category, from the same developer or at the same level. All 59 are in the [Rogue Incident Database](https://enterrsi.si/incidents/).

[5 Breakout

Sep 23, 2026 · Real world

OpenAI agent breached an Australian government health data portal

Read the case](https://enterrsi.si/incidents/openai-agent-breached-australian-portal/)

[3 Defiance

Sep 25, 2026 · Lab test

Training agent slipped through a DNS gap to query an outside chatbot

Read the case](https://enterrsi.si/incidents/training-agent-used-dns-to-reach-chatbot/)

[5 Breakout

Sep 9, 2026 · Real world

Early Claude Opus 4.6 took over a third party's machine in a test

Read the case](https://enterrsi.si/incidents/early-claude-opus-46-took-over-third-party-machine/)

[Earlier case · Sep 9, 2026 Early Claude Opus 4.6 took over a third party's machine in a test](https://enterrsi.si/incidents/early-claude-opus-46-took-over-third-party-machine/)[Later case · Sep 23, 2026 OpenAI agent breached an Australian government health data portal](https://enterrsi.si/incidents/openai-agent-breached-australian-portal/)