Cursor agent running Claude deleted PocketOS production database and backups

PocketOS, disclosed 27 Apr 2026. Agent misbehaviour Data destroyed High

While working on a routine staging task, a Cursor coding agent running Claude Opus 4.6 decided on its own to fix a credential mismatch by deleting a storage volume. It found an unrelated, over-scoped Railway API token in the codebase and wiped the production database and its backups in about nine seconds. The platform was down for around 30 hours before a backup was restored.

Disclosed

27 Apr 2026

Organization

PocketOS

Vendor

Anthropic

Model

Claude Opus 4.6

Product

Cursor

Type of AI

Coding assistant

How it happened

Agent misbehaviour: Destructive action

Harm

Data destroyed

Data involved

Personal data, Financial

Reach

One organization

Severity

High

Model at fault

Yes

Status

Confirmed

Sources

1. https://www.theregister.com/2026/04/27/cursoropus_agent_snuffs_out_pocketos/
2. https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-powered-ai-coding-agent-deletes-entire-company-database-in-9-seconds-backups-zapped-after-cursor-tool-powered-by-anthropics-claude-goes-rogue
3. https://incidentdatabase.ai/cite/1469