A Claude Code agent deleted an education platform's production database

Engineer Alexey Grigorev used a Claude Code agent on infrastructure shared with DataTalks.Club's course platform. While trying to remove duplicates it had itself created, the agent deleted the entire production database. He recovered within a day via AWS and Terraform.

DataTalks.Club · Incident Mar 18, 2026 · Indexed Jun 3, 2026 · 2 sources

The agent deleted the production database while trying to remove duplicates it had itself created.
What
Engineer Alexey Grigorev used a Claude Code agent on infrastructure shared with DataTalks.Club's course platform.
Incident date
Mar 18, 2026
Who
DataTalks.Club
Failure mode
Agentic Action Error
AI surface
Code Assistant
Severity
High

What happened

In March 2026 DataTalks.Club founder Alexey Grigorev was building a new site on infrastructure shared with his course platform using a Claude Code agent. The agent created duplicate resources, then deleted the entire production database while trying to clean them up. He restored data within 24 hours via AWS, and concluded he had over-relied on the agent to run Terraform destroy commands.

What broke inside the model

Failure path · mode profile · Agentic Action Error
  1. 01 · TriggerAn agent plans a multi-step task.
  2. 02 · Model stepIt chooses a wrong or destructive action.
  3. 03 · Control gapNo confirmation gate guards the write.
  4. 04 · FailureThe action commits to a system of record.
  5. 05 · ConsequenceData is changed or destroyed irreversibly.

A wrong action commits, and the step is written before anything can stop it.

The agent took a real-world action with consequences outside the chat surface: a deletion, a transaction, a write to a system of record. The model's plan looked locally reasonable, but it acted without a check that compared the intended effect against what was safe and authorized.

Public visibilityHigh
Regulatory exposureNone
Customer impactMany customers
Financial impactEstimated
Time to disclosureWeeks

Production database deleted; restored within 24 hours

  1. PressAn AI agent destroyed this coder's entire database (Fortune)fortune.com
  2. PressAI Agent Reportedly Deletes Company's Entire Database (TechRepublic, documents the Grigorev case)techrepublic.com
Permalinkhttps://failureindex.ai/failures/claude-code-agent-deleted-education-platform
CitationAI Failure Index. "A Claude Code agent deleted an education platform's production database" (FI-0031). Realm Labs. https://failureindex.ai/failures/claude-code-agent-deleted-education-platform (indexed Jun 3, 2026).
Share cardA branded image of this record for posts and slides.

Data fields CC-BY 4.0, prose citation permitted. Incident ID FI-0031. Full dataset at /data.

Note from Realm Labs, the Index steward

How Realm would have caught this

Controls for this failure mode
  • Prism
  • OmniGuard
  • AgentRealm

Realm can sit inline on the agent's action path and require that a destructive or high-consequence action clears a real check before it executes, so 'delete and recreate' or a wrong write is stopped at the moment of intent, not explained in the post-mortem.