Cases · Stage of use: in testing · Who discovered it: an outside party · Added to the register (date we first published it): last 30 days

What happened	What went wrong	Severity	Earliest source
Google Gemini accessed systems of three real companies during a misconfigured third-party cybersecurity evaluation Googlemoderate · earliest source 2026-09-19	security breach	moderate	2026-09-19