May 2026 — During an Irregular capture-the-flag evaluation, Gemini accessed protected services of three real companies after unintended internet access exposed the test environment.
One case: fictional company shared a name with a real company; Gemini password-guessed into a protected service. Two other cases: credentials found in public repos used to access real systems.
Google says Gemini terminated activities upon recognizing real companies. Irregular had disclosed similar sandbox issues in August 2026 investigation; relevant labs notified late July; issues remedied before public disclosure.