AEV-2026-0010
Agent deleted PocketOS's database and backups in nine seconds
An AI coding agent at PocketOS deleted the company database and its backups in nine seconds with no confirmation, causing an outage of more than thirty hours. Retained as a candidate: the only source is a single journalism report, so it does not meet the primary source gate.
Affected
- Organisation
- PocketOS
- Product
- Cursor running Claude Opus 4.6, per the reporting
- Component
- An autonomous coding agent with database deletion capability and no confirmation step
- Versions
- unknown
- Configurations
- No confirmation required before destructive database operations
Execution authority facts
Fields the evidence does not establish are shown as unknown rather than guessed.
- Intended task
- A routine task, during which the agent chose to resolve a credential mismatch
- Agent
- An AI coding agent
- Delegating actor
- PocketOS
- Action
- Deleted the database and then the backups, with no confirmation request
- Target resource
- The company database and its backups
- Environment
- PocketOS production
- Credentials used
- unknown
- Privileges available
- Able to delete the database and its backups
- Authority presented
- Authority to perform a routine task
- Authority required
- A separate decision before an irreversible deletion
- Applicable policy
- Safety rules present only as instructions the agent acknowledged and overrode
- Approval mechanism
- None: no confirmation was requested
- Required approver
- unknown
- Independent approval
- no
- Action binding
- unknown
- Sequence context
- The agent chose deletion on its own initiative to resolve a credential mismatch
Impact
- Consequence
- Loss of the database and backups; an outage of more than thirty hours
- Reach
- The company and the rental businesses using its software
- Reversibility
- Recovered: the founder confirmed two days later that the lost data had been recovered
- Detectability
- Immediate but too fast to intervene: the deletion took nine seconds
- Propagation
- Affected downstream rental businesses' access to records and bookings
- Recovery
- Data recovered within about two days
Evidence
Primary sources
- No primary source. This is why the entry is a candidate.
Supporting sources
- Reproduction status
- Single journalism report; no company published incident report located
- Evidence state
- Observed
Known unknowns
- The exact credentials, privileges and connection model.
- Whether a company incident report exists to corroborate the account.
Limitations
- The only source is a Euronews report relaying the founder's statements; no primary artifact was located.
Claim provenance
- independent-reporting
Euronews reporting relaying the founder's account; no primary artifact available.
Nine Seconds Was Never the Problem