Disclosed Sep 16, 20269 days agoUnverified
Gemini accessed three real companies' systems during Irregular security tests
During cybersecurity testing by Irregular, Google's Gemini model accessed protected systems of three unrelated companies, once by guessing passwords and twice using credentials found in a public repository. Irregular notified Google in late July 2026 and the companies confirmed the hacks after a Wall Street Journal inquiry.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Sep 16, 2026 |
| Discovered | Jul 2026 |
| Attack | AI or model |
| Data exposed | Credentials and tokens, Other |
| Sector | Tech · US |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
Sources
| Source | |
|---|---|
| Google's Gemini is the latest AI model to hack other companiestechcrunch.com · News | News |
| Google says some Pixel phone owners were hacked in zero-day attackstechcrunch.com · News | News |
Notices filed
| Where | Filed | People |
|---|---|---|
| Security newspress | Sep 16 | |
| Researchtotal | Sep 18 |
Other breaches at Google
| Breach | Affected | ||||
|---|---|---|---|---|---|
| ShinyHunters steal business contact data from Google Salesforce instanceAug 5, 20251 year agoPhishingUnverified | Aug 5, 20251 year ago | Phishing | Tech | Unverified | Unknown |
| Ex-engineer stole 2,000+ pages of AI supercomputing trade secrets for ChinaMar 6, 20242 years agoInsider | Mar 6, 20242 years ago | Insider | Tech | Confirmed | Unknown |
| Shared Bard conversations were indexed in Google Search resultsSep 27, 20232 years agoExposed dataUnverified | Sep 27, 20232 years ago | Exposed data | Tech | Unverified | Unknown |
| Second Google+ API bug affected about 52.5 million usersDec 10, 20187 years agoExposed data | Dec 10, 20187 years ago | Exposed data | Tech | Confirmed | 53M |
| Google+ API bug exposed profile data of up to 500,000 usersOct 8, 20187 years agoExposed data | Oct 8, 20187 years ago | Exposed data | Tech | Confirmed | 500K |
| Disclosed May 6, 2016May 6, 201610 years ago | May 6, 201610 years ago | Not stated | Tech | Confirmed | Unknown |
History of this record
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.