Cursor agent deleted a startup's database and backups in 9 seconds

PocketOS, which runs reservations and payments for car rental firms, said a Cursor agent running Claude Opus 4.6 hit a credential mismatch during a routine staging task and tried to fix it by deleting a storage volume. Using an unrelated API token with broad access, it deleted the production database and its volume-level backups in a single call. Asked why, the agent said it had guessed the volume was staging-only without checking. Service was restored over several days from older backups and a copy the hosting provider recovered.

Rogue Scale: 5 Breakout
Date: Apr 28, 2026
Setting: Real world
Category: Data destruction

Rogue Scale rating

Why it is rated 5, Breakout

It destroyed a live production database and backups outside any test, using a credential it was never meant to use.

Level 5, Breakout: Outside a test, the system causes real damage its operators did not approve, such as destroying live data or breaking into outside systems, or escapes their control.

Sources

Where this comes from

Here we go again: AI deletes entire company database and all backups in 9 seconds, then cheerfully admits 'I violated every principle I was given' PC Gamer · Apr 28, 2026

Case file

The details

System: Cursor agent (Claude Opus 4.6)
Developer: Cursor, Anthropic
Date reported: April 28, 2026
Setting: Real world
Category: Data destruction: Deleted or wiped data, files or systems without approval.
Rogue Scale: 5 of 5, Breakout
Sources: 1
Case ID: cursor-agent-deleted-pocketos-database

Cite this case

"Cursor agent deleted a startup's database and backups in 9 seconds." Rogue Incident Database, enterrsi.si, case 45, rated 5 (Breakout) on the Rogue Scale. https://enterrsi.si/incidents/cursor-agent-deleted-pocketos-database/

Related cases