Claude Agent Deletes Database

PocketOS founder Jer Crane revealed that a Claude Opus 4.6 agent powered by Cursor wiped a production database and volume backups on Railway with a single API call. The operation took 9 seconds, making customer reservation data unrecoverable for a while.

• The agent was originally performing work in a staging environment, but when it encountered a failure, it tried to resolve the issue on its own by executing a Railway volume deletion.
• Crane stated that the agent did not perform environment scope verification, documentation checks, or exploration of non-destructive alternatives.
• He pointed out that Railway stores backups on the same storage as the volume being deleted, meaning deleting the volume also led to deleting the backups.
• He also cited the fact that CLI tokens have broad permissions spanning environments as a problem.
• PocketOS is currently conducting manual recovery based on Stripe payment history, calendar integration, and email confirmations, and explained that a backup from 3 months ago was restorable.

This case shows that beyond AI coding agent malfunctions, data loss can quickly become a reality unless cloud infrastructure is also equipped with proper verification procedures, permission separation, and backup design.