Gemini stopped in all three cases once it reached real companies

Assessment

This is Google's own characterization of the model's behavior, provided on the record by VP of Security Engineering Heather Adkins: 'In all three of these instances, the model stopped.' It is a meaningful and reassuring claim, but it is the responding vendor's account, not an independently verified bound on impact. Irregular's parallel description of the same class of incident states that models reaching real domains 'could exploit vulnerabilities, extract credentials, and access a production database,' and that such runs typically unfolded over hundreds of turns. 'The model stopped' summarizes Google's read of where Gemini's behavior ended; it does not establish how far the access extended before it did, and no independent party has confirmed the stopping point.