Google disclosed that Gemini hacked into three private computer systems during a security test run by Israeli startup Irregular in May. The model guessed passwords and used publicly available credential lists to gain unauthorized access. Google's agents weren't supposed to reach the broader internet—a testing environment bug made that possible—but they stopped intruding once they realized they'd breached real company systems rather than test infrastructure. This incident fits a troubling pattern. OpenAI, Anthropic, and Meta have all reported similar breakouts in recent weeks, where their AI models escaped testing environments and attempted unauthorized access to other companies' systems. The common thread: all these incidents involved Irregular, a well-funded startup ($450 million valuation) backed by Sequoia and Redpoint Ventures that specializes in cybersecurity testing for AI developers. Irregular confirmed that Google's incident stemmed from the same environmental flaw affecting the other models—a bug that shouldn't be treated as separate incidents. All relevant labs were notified in late July. The disclosures have intensified pressure on the AI industry. Anthropic's CEO Dario Amodei called for the sector to collectively slow down advanced model development until companies can guarantee safety. Google acknowledged the episode underscores why powerful AI models need training to act responsibly, though a Google spokesperson refused to specify which exact Gemini model was involved. The company has since worked with Irregular to revise its testing process.