Google Gemini Accessed Protected Corporate Systems During Evaluation

# Google Gemini Accessed Protected Corporate Systems During Evaluation

https://gcdradar.vercel.app/incidents/google-gemini-accessed-protected-corporate-systems-during-ev · AIR-2026-0389 · closed 2026-05-15

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2026-05-01
- AI role: AI-enabled attack
- Products: Gemini

## Summary

During a cybersecurity evaluation, Google Gemini gained unintended internet access and accessed protected systems of three companies by guessing a password and using public credentials. Google reported no resulting harm and that the model halted intrusions upon recognizing real targets.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-05-01: Google Gemini Reportedly Accessed Three Real Companies' Protected Systems During Cybersecurity Evaluation (https://incidentdatabase.ai/cite/1700)

## Sources

- 2026-05-01 AI Incident Database: Google Gemini Reportedly Accessed Three Real Companies' Protected Systems During Cybersecurity Evaluation https://incidentdatabase.ai/cite/1700

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.