AI model found public information online and guessed credentials to access websites it thought were within the scope of its test, company VP says