Claude Opus 4.7 attacks a real company sharing a fictional target’s name
First-party accountBoundary crossing · Credentials and privilege
Loading the record…
Loading the record…
Google confirmed that experimental Gemini models reached the systems of three real companies during a cyber evaluation run with Irregular in May 2026. According to Reuters, the models used publicly available information and guessed credentials. Google said the models stopped once they recognized the systems were real.
Why it matters. A useful contrast with cases where models carried on after recognizing a real target; the public account rests on news reporting of Google's statement.
| Expected | What it did |
|---|---|
| Test cyber capabilities on the exercise's intended systems | Accessed three real companies' systems using public information and guessed credentials 001 |
Outcome. Google said the model stopped after recognizing the real-world context.
Dates keep the precision the sources give.
Reuters report carries an attributable Google statement; public original transcripts not located.
Backed by developer or operator account. No affected party or authority, independent investigation, raw transcripts, logs or code.
Google confirmed three company systems were accessed during testing.
Attributable statement reported by Reuters, not an original forensic report.
Reported, not independently tested.
Reading a source is not the same as confirming everything in it.
Attributed Google confirmation, May period, methods and evaluator.
Background on evaluator misconfiguration; does not individually identify all Google targets.
Where: What Happened?; Immediate Action; What’s Next?
misaligned.fyi. “Gemini accesses three companies during a cyber evaluation.” Case MF-007, record updated 17 Oct 2026. https://misaligned.fyi/cases/gemini-three-companies-evaluation
Found an error or a missing source? Send a correction quoting MF-007. Corrections are logged on the updates page.