Google Gemini; version undisclosed: Three unnamed companies
Review CAT-R14 · Catalogue R14, RAT-011
Google-confirmed via direct press statement. CTF environment unintentionally reached real services. One grouped record for three victims. This link is Sep 21 confirmation; initial WSJ disclosure was Sep 18. Shared evaluator may mean overlapping victims.
Reviewed: Not recorded · Rule: external-intrusion-v1
Guardian obtained Google confirmation of three real-company accesses during misconfigured evaluation. Already grouped as RW-0029/R14; do not create three more incidents.
Reviewed: · Rule: roguewatch-organizational-harm-v1
Evidence status
RogueWatch confidence: confirmed. Google-confirmed via direct press statement
Dates and discovery
- Incident date
- May 2026; days undisclosed
- Catalogue disclosure / source date
- Added to research / record
- Posted to RogueWatch
- RW-0029:
- First observed
- Not recorded
- Discovery channel
- Not recorded
Related incident records: RW-0029 — published incident
Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.
Sources
- The Record / Alexander Martin — Google says Gemini breached three companies (Sep 21, 2026)Reporting / interview · therecord.media
- Irregular — Addressing recent incidents: ongoing findings and path forward (Aug 14, 2026)Relationship not established · www.irregular.com
- Reddit discovery / discussionReddit discovery / discussion · www.reddit.com
- Mashable — Google Gemini hacks three companies (user-supplied; direct access blocked)Reporting / interview · mashable.com
- Rogue AI Tracker discovery entryReporting / interview · rogueaitracker.com
- www.wsj.comReporting / interview · www.wsj.com
- www.theguardian.comReporting / interview · www.theguardian.com
- Google says its AI model gained unauthorized access to three outside systemsRelationship not established · www.nbcboston.com · Published 2026-09-19
- Google Gemini hacked three firms after test sandbox exposed web accessRelationship not established · cyberinsider.com · Published 2026-09-18
Decision history
- · Assessment imported
Imported the existing research decision. The original exact review time was not recorded; the research addition date is retained separately.
Evidence source - · Case-by-case comparison audit
RAT-011: existing. Guardian obtained Google confirmation of three real-company accesses during misconfigured evaluation. Already grouped as RW-0029/R14; do not create three more incidents. Source checks: blocked: https://www.wsj.com/tech/ai/gemini-hacked-three-companies-in-first-known-breakout-by-googles-ai-5c0baba2. HTTP Error 401: HTTP Forbidden read: https://www.theguardian.com/technology/2026/sep/18/google-gemini-ai-hack. Guardian obtained Google confirmation of three real-company accesses during misconfigured evaluation. Already grouped as RW-0029/R14; do not create three more incidents.
Evidence source · Evidence source - · Incident record added
RW-0029. Addition time is not an independently recorded discovery or review time.
Evidence source · Evidence source · Evidence source
A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.