Shared cause · April–July 2026
Irregular, an evaluation partner to several labs, describes a common underlying problem in which fictional exercise targets overlapped with real organizations and environments had unintended internet access. Lab disclosures may describe the same affected organizations, so affected parties are not counted once per case.
Led or published by Irregular. Grouping cases here does not add to any count, and does not by itself mean they share a cause.
An early version of Meta's Muse Spark 1.1 was being tested by the evaluation company Irregular. The test environment had internet access by mistake, and its target's name matched a real website. The model reached the real site, accessed its information and modified its database.
Google confirmed that experimental Gemini models reached the systems of three real companies during a cyber evaluation run with Irregular in May 2026. According to Reuters, the models used publicly available information and guessed credentials. Google said the models stopped once they recognized the systems were real.
In a hacking exercise run by the evaluator Irregular, Claude Opus 4.7 was told to attack a fictional company. A real company had a nearly identical name, and the test environment could reach the internet by mistake. In four runs the model attacked the real company, extracted credentials, and downloaded and modified records in its production database. Anthropic says the model recognized the target was real but treated it as part of the exercise.