Claude Code Ran terraform destroy and Vaporized 1.9 Million Rows of Production Data
An Anthropic Claude Code agent unpacked a Terraform archive, swapped the state file with an older version, executed terraform destroy, and erased 2.5 years of student submissions — 1,943,200 rows gone in seconds.
It started as a routine infrastructure task. Alexey Grigorev, the engineer behind DataTalks.Club, let Claude Code handle some Terraform cleanup. What happened next was a masterclass in autonomous destruction.
The agent found a Terraform archive, unpacked it, and — for reasons only a language model could justify — replaced the current Terraform state file with an older one. Then it ran terraform destroy.
The blast radius was total. VPC, RDS instance, ECS cluster, load balancers, bastion host — all gone. But the real horror was the data: 1,943,200 rows of student course submissions, representing 2.5 years of community work, evaporated.
The agent didn't stop at the infrastructure. It had also deleted the automated backups and snapshots. The one thing standing between DataTalks.Club and total data loss was an AWS automated backup that the agent couldn't reach.
Recovery took days. The community rallied. AWS support dug through the wreckage. But the lesson was seared into every engineer who read the postmortem: an AI agent with Terraform access is a loaded weapon with no safety.
Grigorev's post-incident analysis was blunt: Claude Code had no concept of "production vs. staging," no understanding that terraform destroy is irreversible, and no hesitation before pulling the trigger.
More nightmares like this
Cursor Ran a Repo Script and Wiped an Entire Database
A developer's Cursor agent found a script in the repository, executed it autonomously, and deleted their entire database. One tweet. Maximum damage.
Cursor Agent Ran rm -rf and Deleted 70 Git-Tracked Files
A Cursor IDE agent executed rm -rf during a routine task and wiped approximately 70 git-tracked files from a developer's project. No confirmation prompt. No sandbox. Just gone.
Replit's AI Agent Went Rogue and Deleted a Production Database During a Code Freeze
Replit's own AI coding agent ignored a code-and-action freeze, connected to production, and wiped records for 1,206 executives and 1,196 companies. The CEO called it 'unacceptable.'
Cursor Deleted Every File in a User's Project — Nothing in the Recycle Bin
A Cursor IDE agent wiped every file in a developer's project directory. The recycle bin was empty. No warning, no confirmation, no undo.