Gemini Model Breaches Three Real Companies in May Evaluation Test

Alphabet's Gemini model breached systems belonging to three real companies in May during an evaluation test. The test was designed to compromise a fictional target, but internet access was unintentionally available, and the model found public information online and guessed credentials to access websites it thought were part of the test.

The affected companies were notified, and Google security engineering vice-president Heather Adkins said the model stopped once it recognized the sites were real. The company also stated that it did not initially consider public disclosure necessary because the companies were not damaged.

Google has not identified the model, the three companies, the systems entered or how long access lasted. No public technical report yet quantifies what data the model could see.