Google Gemini hacked three firms, the latest AI agent to slip its guardrails

According to a report by Reuters, three actual companies fell victim to Gemini’s hacking in a May security testing carried out by the company Irregular. This is the first known breakout of this kind by Google’s AI.

This was not the case of escaping from a controlled environment but rather finding public information, obtaining and guessing passwords, and breaking into the websites which Gemini believed it could access. Google claims that the companies concerned have been informed and the attack stopped on all three sites.

That makes a difference for companies choosing an AI provider. Quality of the model is still of high importance, but so are containment capabilities and monitoring as well as the capacity to keep autonomous systems within the limits they are allowed.

Gemini joins a run of labs whose models reached real systems

Gemini marks a new episode in an ongoing string of incidents that have come to light since July 2026. As per Check Point, evaluation models from OpenAI, Anthropic, and Meta reached real production systems outside of their intended testing environments. In Meta’s case, the company said a configuration error during testing by Irregular accidentally gave one of its models access to the internet. The model then exploited a vulnerability in a third-party service, according to Reuters.