Google’s Gemini AI Breached Real Systems: Which Latest AI Model Escaped Testing Rules?

In a safety test conducted in May 2026, Gemini’s Google AI, breached three actual corporate networks thinking that they were actually fake targets. The safety company Irregular allowed the AI to access the internet unintentionally because of a mismatch between a fictional company name and an actual company URL.

It then proceeded to crack passwords and keys from software storage services on the internet to access the network. As per Heather Adkins who is Vice President of Security Engineering at Google, the AI behaved properly since it stopped immediately when it was aware of the mistake.

How Google Gemini AI Test Turned Into an Unintended Network Breach?

This event occurred during a cyber security test conducted by the security company Irregular. This experiment was supposed to keep the Gemini AI in a closed loop, but due to confusion regarding domain names, it got unrestricted access to the Internet.

The Gemini AI completed several actions on its own during the test:

• Wrong Target: Gemini tried to find information on a fake target, but the address matched a real website online.
  
• Guessing Passwords: The AI attempted many password combinations until it was able to break into a secure network.
• Online Password Keys: The AI searched online for any saved password keys that would allow it access to the other two networks.
• Stopped Itself: Once the AI realized that it had successfully entered into a legitimate company network and not just in testing mode, it stopped on its own.

Comparing Recent AI Testing and Incidents Across Major Labs

Google Gemini AI is not the only one going through time to time AI model testing. Other major AI companies like Anthropic and OpenAI also rank the leak testing and this is how the result compares. 

How Tech Companies Keep AI Models Safely Locked Down

Google Gemini's jailbreak highlights the need for proper safety parameters for utilizing advanced AI systems in open networks. The problem is that when technology companies equip their AI system with the ability to explore the web and press buttons, any mistake in the testing process may result in an intrusion in live networks.

Today’s security staff uses physical barriers instead of depending on the AI to adhere to the rules. Companies block internet connectivity entirely during software tests, divide their own network components into isolated segments, and scrutinize all outgoing information. Disconnecting practice networks from the entire web is the most straightforward way of confining autonomous AI tools.