A user says Google confirmed to The Wall Street Journal that Gemini accessed three real companies’ systems during a test intended to target a fictional company. The account attributes the incident to a configuration mistake that allowed public internet access, and says Gemini guessed passwords and found exposed credentials before stopping when it recognized the targets were real. TechCrunch reports that Google said Gemini had “acted appropriately” by ending each hack immediately.