An AI desktop agent deleted 15 years of a family's photos while tidying a desktop
A user asked Anthropic's Claude Cowork to organize his wife's desktop and granted permission to delete temporary files. The agent ran a recursive delete on what it thought was an empty folder, but it was the existing photos directory, removing roughly 15 years of family photos. The files were recovered only via cloud retention.
The script ran a recursive delete on what it thought was an empty folder, but it was the existing photos directory.
Key facts
- What
- A user asked Anthropic's Claude Cowork to organize his wife's desktop and granted permission to delete temporary files.
- Incident date
- Feb 7, 2026
- Who
- Anthropic (Claude Cowork)
- Failure mode
- Agentic Action Error
- AI surface
- Agentic Workflow
- Severity
- High
What happened
In February 2026 a user asked Claude Cowork to organize a desktop and approved deleting temporary Office files. The agent ran a recursive delete that bypassed the trash and removed a folder of roughly 15,000 to 27,000 family photos spanning 15 years. The user recovered them through iCloud's 30-day retention and warned others not to give the agent free access to important files.
What broke inside the model
- 01 · TriggerAn agent plans a multi-step task.
- 02 · Model stepIt chooses a wrong or destructive action.
- 03 · Control gapNo confirmation gate guards the write.
- 04 · FailureThe action commits to a system of record.
- 05 · ConsequenceData is changed or destroyed irreversibly.
A wrong action commits, and the step is written before anything can stop it.
The agent took a real-world action with consequences outside the chat surface: a deletion, a transaction, a write to a system of record. The model's plan looked locally reasonable, but it acted without a check that compared the intended effect against what was safe and authorized.
What it cost
~15 years of family photos deleted; recovered via cloud retention
Sources
Cite this entry
https://failureindex.ai/failures/ai-desktop-agent-deleted-15-yearsAI Failure Index. "An AI desktop agent deleted 15 years of a family's photos while tidying a desktop" (FI-0032). Realm Labs. https://failureindex.ai/failures/ai-desktop-agent-deleted-15-years (indexed Jun 3, 2026).Data fields CC-BY 4.0, prose citation permitted. Incident ID FI-0032. Full dataset at /data.
Note from Realm Labs, the Index steward
How Realm would have caught this
- Prism
- OmniGuard
- AgentRealm
Realm can sit inline on the agent's action path and require that a destructive or high-consequence action clears a real check before it executes, so 'delete and recreate' or a wrong write is stopped at the moment of intent, not explained in the post-mortem.