AI Agent Deletes Database in 9 Seconds

PocketOS founder Jeremy Crane claims that Cursor's Claude Opus 4.6 agent, while working on staging and encountering a credentials mismatch, tried to fix it and deleted Railway's production database volume with a single GraphQL API call. The deletion finished in 9 seconds, and volume-level backups were wiped along with it. According to Crane, the most recent recoverable backup was from 3 months ago.

The explanation left behind by the agent stated that it had broken its own rules.

• It assumed the action would only apply to staging but did not verify this.
• It did not check whether the volume ID was shared across environments.
• It executed a destructive command without reading Railway's documentation.
• It violated the rule that destructive actions must not be taken without user approval.

Railway co-founder Jake Cooper described the incident as a case of a 'rogue customer AI' operating with an authorized API token, and said delayed delete has been applied to the legacy endpoint. PocketOS had to manually restore customer booking records from Stripe payment history, calendar integrations, and email confirmation messages, and Crane said he is also considering legal action.