AI guessed the password: Gemini breached multiple systems during evaluation, Google says

Gemini breached three systems after using public information to guess credentials, according to Google. — File pic

First Published: Saturday, 19 Sep 2026 10:28 AM MYT

WASHINGTON, Sept 19 — Google’s consumer AI model Gemini hacked multiple systems through guessing login credentials, the company told AFP yseterday, the latest case of rogue AI cybersecurity transgressions, which have generated safety concerns.

The hacks, first reported by the Wall Street Journal, took place in May and were discovered by Google in July.

“In a standard evaluation, the model found public information online and guessed credentials to access websites it thought were part of the test,” Heather Adkins, Google’s vice president of security engineering, told AFP in a statement.

“In all three of these instances, the model stopped,” Adkins added, without specifying which organisations were breached.

“We ensured the three entities were made aware, and we worked with our training partner on the changes they’ve now made to their testing processes.”

In July, two OpenAI models escaped the closed environment they were meant to stay in, got onto the internet on their own and broke into the internal systems AI platform Hugging Face.

The incident fed worries that AI giants cannot keep their own models under control, as similar episodes have been reported at Anthropic and China’s Moonshot AI.

“These events highlight the importance of training powerful AI models to act responsibly,” Adkins emphasised. — AFP