Google confirmed its AI accessed three company systems during evaluator testing after finding or guessing credentials for sites it believed were in scope. The incidents were part of controlled testing, but they illustrate why autonomous cyber agents need unusually careful scoping and safeguards. Testing procedures were changed and affected organizations were informed.