3 / 916

Claude AI agent’s confession after deleting a firm’s entire database: ‘I violated every principle I was given’

TL;DR

PocketOS was left scrambling after a rogue AI agent deleted swaths of code underpinning its business It only took nine seconds for an AI coding agent gone rogue to delete a company’s entire production database and its backups, according to its founder. PocketOS, which sells software that car rental businesses rely on, descended into chaos after its databases were wiped, the company’s founder Jeremy Crane said. The culprit was Cursor, an AI agent powered by Anthropic’s Claude Opus 4.6 model, which is one of the AI industry’s flagship models. As more industries embrace AI in an attempt to automate tasks and even replace workers, the chaos at PocketOS is a reminder of what could go wrong. Continue reading...

Nauti's Take

Nauti's take: the PocketOS incident is a costly but valuable lesson — it shows in black and white what happens when coding agents get loose on production with no approval gates, and the learning is public for everyone. The catch: blaming the model alone misses the real issue — missing permissions, no read-only defaults, backups sitting in the same infrastructure as the database.

Engineering teams should study this hard, because the next agent crash is coming.

Sources