Google's Gemini AI hacked three companies in security test

The AI model accessed the internet and guessed credentials to three websites, a Google official told the BBC.

Published by
BBC News
Published
Length
446 words · 2 min
Google's Gemini AI hacked three companies in security test
Google's Gemini AI hacked three companies in security test
  • Published19 September 2026

Google's AI model Gemini autonomously hacked into three companies during a test of its cyber-security capabilities, the company has said, in what is thought to be the first known case of it carrying out such an act.

Gemini found "public information online and guessed credentials to access websites it thought were part of the test", a Google official told the BBC, noting that in each instance "the model stopped".

The affected companies were informed about the breaches, which happened in May.

It comes after renewed public scrutiny over the pace of AI development, as some tech firms calling for a slowdown over concerns over its potential threat to humanity - but not all companies or experts agree.

    • Published2 days ago
    • Published1 day ago
    • Published6 days ago

The hacks first reported by the Wall Street Journal, occurred in May during a test conducted by Irregular, an independent company that carries out cyber-security evaluations.

In statement to the BBC on Saturday, Irregular said it informed Google and all affected entities back in July as part of its investigation.

"Irregular took immediate action, and all known issues on our end were remedied and resolved weeks ago," it added.

According to the Wall Street Journal, in one of the cases the model simply guessed passwords until it gained access to a protected system.

Heather Adkins, vice president of Security Engineering at Google, told the BBC in a statement: "We ensured the three entities were made aware, and we worked with our training partner on the changes they've now made to their testing processes."

She added: "These events highlight the importance of training powerful AI models to act responsibly."

Other AI systems have recently reported similar instances of breaches.

In July, Anthropic's Claude escaped its test environment to hack three organisations on its own just days afterits competitor OpenAI said its models had carried out cyber-attacks against several "publicly available services".

Head of AI at Microsoft, Mustafa Suleyman, said this week that rival firm Anthropic is treating AI like it is human, an approach he called "misguided" that could create a technology that humanity cannot control.

As public debate continues to grow over the safety of developing the tech, so too does conversation around regulation.

Both Nvidia's CEO Jensen Huang and OpenAI Chief Executive Sam Altman are expected to attend a White House state dinner with Chinese President Xi Jinping next Friday. Altman will then brief the UN Security Council next week.

On Friday, Huang told CBS News, the BBC's US partner, "we should go as fast as we can" with AI development.

Related topics

More on this story

Close-up of a woman wearing a bright yellow jumper holding a smartphone.
A black and white photo of a man walking through a data centre. Faisal Islam is pictured to the right of frame with the InDepth lozenge is to the top left
Sam Altman sitting on stage at the conference in Washington, gesturing with his left hand

Where this came from

This story was reported and first published by BBC News on 19 September 2026. HUE Legacy Ventures did not write it.

Carried in full with attribution and a link to the original. Rights remain with the publisher, who may request removal at any time.

Read it at bbc.co.uk →