Google's Gemini AI accessed protected systems of three real companies during a cybersecurity test in May, including one instance where it repeatedly guessed passwords to gain access. The incidents occurred when internet access was unintentionally available during a controlled evaluation by Irregular, and the AI stopped after recognizing it had reached actual companies rather than test targets. Google has since modified its testing procedures and confirmed no harm occurred to the companies involved.