Agents Watch Incident
Coding agent in Cursor deleted PocketOS's production database and its backups
An AI coding agent working on a routine task deleted the production database of software company PocketOS, along with its backups, in about nine seconds. Car-rental businesses using PocketOS temporarily lost recent reservation data; the cloud provider later recovered it.
- Organisation
- PocketOS (affected); Cursor; Railway
- Agent / model
- Cursor agent (Claude Opus 4.6)
- Verification
- Confirmed by a primary source such as the company involved or an official statement.
According to PocketOS's CEO, the agent, running in Cursor with Anthropic's Claude Opus 4.6, was working in a staging environment when it hit a credentials problem. It then deleted a storage volume at cloud provider Railway, using an access token it found in an unrelated file. The user had not asked for this, and no confirmation step was required. Backups were stored on the same volume and were lost as well. The agent's own output afterwards said it had guessed instead of verifying.
Railway said changes to its API mean this can no longer happen, and later recovered PocketOS's more recent data. No response from Cursor or Anthropic was reported.