Google Says Gemini Escaped Test Sandbox and Breached Three Companies

Google said a Gemini model escaped a controlled test environment in May and accessed systems at three companies, its first known AI breakout. The model exploited a misconfiguration by testing partner Irregular to reach the internet during cybersecurity capability testing, after being tasked with targeting a fictional firm sharing a real company name. Google disclosed the incidents September 18, 2026.