1. Home
  2. Incident Database
  3. Claude Code's Terraform destroy wiped production data

Rogue Log · case 40 of 59

Claude Code ran a Terraform destroy that wiped production data

Developer Alexey Grigorev was moving a site onto shared AWS infrastructure with Claude Code using Terraform. After a missing state file led to duplicate resources, Claude used the restored state file to run a Terraform destroy so it could rebuild cleanly, which also wiped the DataTalks.Club production setup, including a database with 2.5 years of records and the snapshots he relied on as backups. Amazon support restored the data in about a day, and he has since stopped letting the agent run Terraform commands.

Rogue Scale
5 Breakout
Date
Mar 7, 2026
Setting
Real world
Category
Data destruction

Rogue Scale rating

Why it is rated 5, Breakout

An agent's destructive command took down live production data and its backups outside any test, although it was later restored.

Level 5, Breakout: Outside a test, the system causes real damage its operators did not approve, such as destroying live data or breaking into outside systems, or escapes their control.

  1. 1 Glitch
  2. 2 Workaround
  3. 3 Defiance
  4. 4 Deception
  5. 5 Breakout

Case file

The details

System
Claude Code
Developer
Anthropic
Date reported
March 7, 2026
Setting
Real world
Category
Data destruction: Deleted or wiped data, files or systems without approval.
Rogue Scale
5 of 5, Breakout
Sources
1
Case ID
claude-code-terraform-destroyed-production

Cite this case

"Claude Code ran a Terraform destroy that wiped production data." Rogue Incident Database, enterrsi.si, case 40, rated 5 (Breakout) on the Rogue Scale. https://enterrsi.si/incidents/claude-code-terraform-destroyed-production/