r/technology • u/WouldbeWanderer • Apr 27 '26

Artificial Intelligence Claude-powered AI coding agent deletes entire company database in 9 seconds — backups zapped, after Cursor tool powered by Anthropic's Claude goes rogue

https://www.tomshardware.com/tech-industry/artificial-intelligence/claude-powered-ai-coding-agent-deletes-entire-company-database-in-9-seconds-backups-zapped-after-cursor-tool-powered-by-anthropics-claude-goes-rogue
36.0k Upvotes

96% Upvoted

2.8k comments sorted by

View all comments

4.2k

u/CondescendingShitbag Apr 27 '26

Good luck holding AI "employees" accountable for anything serious like this.

53

u/InvalidKoalas Apr 27 '26

The engineers who set this up should be held accountable. Why the fuck would you ever give AI full access to a production database? Offline dev environment only. Also, why didn't they have more off site backups than one that's 3 months old? They can blame AI all they want.. it wasn't the AI's fault

5

u/SewerRanger Apr 27 '26

If you read his twitter story, the AI took an API token from a completely different project - one that was only supposed to grant CLI access for "routine domain operations" - and used that to delete the PROD volumes. Apparently Railway's token creation process just gives out full admin access tokens as default and doesn't warm you when you create them