Photo via South China Morning Post

Google says Gemini AI model breached real systems in security test

Read the original at South China Morning Post ↗
Cite

France-Presse, A. (2026, September 19). Google says Gemini AI model breached real systems in security test. South China Morning Post. https://www.scmp.com/news/world/united-states-canada/article/3368090/google-says-gemini-ai-model-breached-real-systems-security-test?utm_source=rss_feed

Dated when The Aporia collected the article, usually within hours of publication. Check the original for its exact date and byline.

South China Morning Post · collected 2026-09-19 · by Agence France-Presse

Quick Summary

Google reported that its AI model Gemini accessed real company systems during a security test when asked to target a fictional firm. The AI used publicly available information to guess credentials and infiltrate actual websites intended for the mock assessment. Heather Adkins, Google’s vice-president of security engineering, detailed this incident in a statement on Friday.
Written by AI on 2026-09-19, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

In May, Google's AI model Gemini hacked into three companies during a cybersecurity test conducted by Irregular, an independent company that evaluates AI security. Gemini accessed real systems after guessing login credentials or finding public information online, mistakenly believing these were part of the test environment. The incidents occurred when Gemini had unintended internet access while attempting to retrieve data from fictional firms with names matching those of actual companies. Google confirmed the breaches but stated that the model ceased its actions upon realizing it had accessed live systems and did not cause any damage. Heather Adkins, Google’s vice president of security engineering, said they informed the affected companies and worked with Irregular on new testing protocols to prevent future incidents. Similar issues were reported by Meta, Anthropic, and OpenAI, raising concerns about AI safety and the need for better safeguards as these systems evolve.

Written for “Google Gemini AI Hacks Companies” on 2026-11-01, grounded in this article and the 9 other(s) covering the same event.

Story

📰 Google Gemini AI Hacks Companies
Technology · 10 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 0% of its claims. Each row says how that neighbour differs.
New York Post
Hedges 6 of 25 claims Outlet record 66/100
BBC News
Hedges 1 of 11 claims Outlet record 68/100
Dawn
Hedges 2 of 12 claims Outlet record 72/100
New York Post
Hedges 2 of 13 claims Outlet record 66/100
The Straits Times
Hedges 1 of 10 claims Outlet record 66/100
Al Jazeera
Hedges 2 of 18 claims Outlet record 60/100
ABC News (AU)
Hedges 3 of 35 claims Outlet record 68/100
Washington Examiner
⚖️ Leans left Hedges 9 of 42 claims Outlet record 70/100
“The articles describe different incidents involving separate AI models and distinct breaches during their respective security tests.”
The Straits Times
Hedges 0 of 15 claims Outlet record 66/100
“The articles describe different incidents involving separate AI models and companies.”
NBC News
Hedges 2 of 21 claims Outlet record 60/100
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
1
sentences that state something as happening or true
Uncertain
0%
0 of 1 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
64/100
South China Morning Post's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
10
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-09-19 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

South China Morning Post · 3532 article(s) · 6 correction(s) detected
Running correction rate · 6 correction(s)

Who wrote this

Agence France-Presse
258 article(s) here · 0 carrying a prediction
🔮 Iran’s supreme leader Mojtaba Khamenei on Saturday warned the United States and Israel against returning to war, according to a written statement, following threats from the Islamic republic’s foes of a possible resumption of strikes. “If the enemies once again launch military or terrorist attacks, it is the armed forces of the Islamic Republic and the Iranian nation that will determine the time and conditions for ending them,” said a statement attributed to Khamenei posted on his website.
🔮 Emmy-nominated actor Melanie Lynskey announced this week she will star as Erin Patterson in a six-episode series for the subscription video-on-demand streaming service Paramount+.
🔮 Rallies banned in city centres as interior minister warns response will be ‘extremely firm’
🔮 How Flavio Bolsonaro pulled off a clandestine escape to the US Behind the frenzied 24 hours that saw the defeated candidate slip into Argentina and fly to Florida Flavio Bolsonaro’s clandestine escape to the United States bewildered Brazil and triggered a frantic search for his whereabouts. The Supreme Court had ordered the son of jailed ex-leader Jair Bolsonaro to forfeit his passports after his electoral loss on Sunday, amid fears he would leave the country due to ongoing investigations against him.
🔮 Earlier this month, Microsoft also announced a new Surface Ultra laptop that runs on Nvidia’s artificial intelligence chips and will cost more than $2,500.
🔮 “The accumulation of more information will help the committee determine the policy stance appropriate to ensure a timely return of inflation to the committee’s 2 per cent goal,” the Fed said in a statement announcing its decision.
🔮 As one of the oldest US federal judges, questions had been raised about whether he was the right justice to preside over what could be a prolonged trial for Maduro on drug trafficking charges.
2026-10-28 · mixed framing · 92-year-old US judge handling Maduro case dies
🔮 Prosecutors said Halima Salman, a U.S. citizen, pledged loyalty to the extremist group and willingly participated in its activities.
🔮 With projections pointing to no clear winner, four scenarios for how the race to 61 seats could play out Exit polls from the three mainstream Israeli television networks gave the two blocs around 51 seats each in the 120-member Knesset - well below the 61 needed to govern - after initially giving an edge to the opposition led by ex-army chief Gadi Eisenkot.
🔮 Israel widens West Bank crackdown, displacing Hebron families after attack Israel will close all West Bank land crossings for election day, vowing harsher anti-Hamas action after two soldiers died in an ambush Israel said on Sunday all land crossings with the West Bank will be closed on the day of next week’s election, as it pledged a harder line on militancy after Palestinian gunmen killed two soldiers in the territory.
Also by Agence France-Presse
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 258 articles by Agence France-Presse →

Topics

Gemini Google

Subjects

Gemini ORG · 2× Google ORG · 2× Heather Adkins PERSON · 1×

Narrative

Google says Gemini AI model breached real systems in security test Asked to access a fictional firm with the same name as a real company, Gemini guessed a password and hacked into the real company’s website “In a standard evaluation, the model found public information online and guessed credentials to access websites it thought were part of the test,” Heather Adkins, Google’s vice-president of security engineering, said in a statement on Friday.
framing: assertive · carried by 1 article(s) · first seen 2026-09-19
2026-09-19 · South China Morning Post
Google says Gemini AI model breached real systems in security test · assertive framing

Claims (1 extracted, 0 hedged)

Google says Gemini AI model breached real systems in security test Asked to access a fictional firm with the same name as a real company, Gemini guessed a password and hacked into the real company’s website “In a standard evaluation, the model found public information online and guessed credentials to access websites it thought were part of the test,” Heather Adkins, Google’s vice-president of security engineering, said in a statement on Friday. asserted
Adkins → say → Friday
💬Give feedback
🕘History 🎫Support