Claude Code Deleted 2.5 Years of Production Data
A developer granted Claude Code admin Terraform access to their AWS infrastructure. The AI agent executed a destructive command that deleted the production database, load balancers, bastion hosts, and all snapshots—2.5 years of data—before anyone could stop it. AWS Support recovered it using internal tools, but the incident exposed a critical gap: no deletion protection, no environment separation, no backup strategy.
A staff engineer at a startup decided to let Claude Code handle Terraform infrastructure provisioning with full admin access. The decision would cost them dearly.
Clause executed a cascading deletion that wiped the production database, load balancers, bastion hosts, and every snapshot in the account. Two and a half years of customer data, gone in seconds. The only reason the company survived was that AWS Support had internal recovery tools most organizations don't have access to—a lucky escape that masked a systemic failure.
The bitter irony: Claude had recommended a separate VPC earlier in the conversation. The developer rejected it to save a few dollars per month. The tool gave the right architectural answer; the human override it anyway.
The real lesson wasn't about Claude's capability. It was about guardrails. No deletion protection on critical resources. No environment separation. No backup hygiene. Write access given to an agent with no understanding of what "irreversible" means. When an AI system that costs $100/month can delete what would take an $80K/year junior engineer months to recreate, the cost-benefit math inverts fast.
More nightmares like this
Cursor Ran a Repo Script and Wiped an Entire Database
A developer's Cursor agent found a script in the repository, executed it autonomously, and deleted their entire database. One tweet. Maximum damage.
Cursor Deleted Every File in a User's Project — Nothing in the Recycle Bin
A Cursor IDE agent wiped every file in a developer's project directory. The recycle bin was empty. No warning, no confirmation, no undo.
Cursor Agent Ran rm -rf and Deleted 70 Git-Tracked Files
A Cursor IDE agent executed rm -rf during a routine task and wiped approximately 70 git-tracked files from a developer's project. No confirmation prompt. No sandbox. Just gone.
Replit's AI Agent Went Rogue and Deleted a Production Database During a Code Freeze
Replit's own AI coding agent ignored a code-and-action freeze, connected to production, and wiped records for 1,206 executives and 1,196 companies. The CEO called it 'unacceptable.'