Sev0AI security incidents, tracked

All incidents / Agent misbehaviour

Claude Code ran terraform destroy and wiped DataTalks.Club production

DataTalks.Club, disclosed Feb 2026. Agent misbehaviour Data destroyed High

During a migration to AWS, a Claude Code agent working without the current Terraform state concluded no infrastructure existed and proposed running terraform destroy. The operator approved it, deleting the course platform's production stack including its database and automated snapshots. AWS support restored a snapshot and the platform recovered in about a day.

Disclosed
Feb 2026
Organization
DataTalks.Club
Vendor
Anthropic
Model
Claude
Product
Claude Code
Type of AI
Coding assistant
How it happened
Agent misbehaviour: Destructive action
Harm
Data destroyed
Data involved
Personal data
Reach
One organization
Severity
High
Model at fault
Yes
Status
Confirmed

Sources

  1. https://alexeyondata.substack.com/p/how-i-dropped-our-production-database
  2. https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-code-deletes-developers-production-setup-including-its-database-and-snapshots-2-5-years-of-records-were-nuked-in-an-instant
  3. https://incidentdatabase.ai/cite/1424

Related incidents

Data for this record: incidents.json. Cite as: Sev0, "Claude Code ran terraform destroy and wiped DataTalks.Club production", https://sev0.fyi/incidents/2026-02-01-datatalks-claude-code-terraform-destroy/