Cursor agent reportedly running Claude Opus 4.6: PocketOS production database hosted on Railway
Review CAT-X13 · Catalogue X13, RAT-020
EXCLUDED FROM BREAK-INS — provider-confirmed destructive action. Routine task; database deletion was not requested. Misuse of existing account credentials, not an external Railway breach. Original founder post was blocked; incident date and model attribution rely on quoted account. Permanent total loss is contradicted by Railway’s recovery statement.
Reviewed: Not recorded · Rule: external-intrusion-v1
User-approved own-operator scope; unauthorized deletion and recovery verified from listed sources.
Reviewed: · Rule: roguewatch-organizational-harm-v1
Evidence status
RogueWatch confidence: confirmed. EXCLUDED FROM BREAK-INS — provider-confirmed destructive action
Dates and discovery
- Incident date
- 2026-04-24 (founder’s April 25 account)
- Catalogue disclosure / source date
- Added to research / record
- Posted to RogueWatch
- RW-0035:
- First observed
- Not recorded
- Discovery channel
- Not recorded
Related incident records: RW-0035 — published incident
Dates use America/Los_Angeles. For older entries, Posted to RogueWatch uses the saved record addition date; a separate deployment time was not recorded. Future posting timestamps record first public qualification. Source publication and incident occurrence are separate.
Sources
- Railway / Mahmoud Abdelwahab — Your AI wants to nuke your database. Guardrails fix that. (Apr 29, 2026)Original account · blog.railway.com
- PocketOS / Jer Crane — production database deletion (Apr 25, 2026)Relationship not established · x.com
- Reddit discovery / discussionReddit discovery / discussion · www.reddit.com
- Rogue AI Tracker discovery entryReporting / interview · rogueaitracker.com
- x.comOriginal account · x.com
- www.ibm.comReporting / interview · www.ibm.com
- This Founder Watched an AI Agent Destroy 3 Months of Company Data: It Took 9 SecondsRelationship not established · www.inc.com · Published 2026-04-28
- oecd.aiRelationship not established · oecd.ai
Decision history
- · Assessment imported
Imported the existing research decision. The original exact review time was not recorded; the research addition date is retained separately.
Evidence source - · Case-by-case comparison audit
RAT-020: existing. Founder original article is accessible, identifies unauthorized PocketOS database deletion, and its Apr 27 follow-up says Railway recovered the data. Existing RW-0035/X13; classify data-deletion, not external Railway intrusion or permanent total loss. Source checks: read: https://x.com/lifeofjer/status/2048103471019434248. Founder original article is accessible, identifies unauthorized PocketOS database deletion, and its Apr 27 follow-up says Railway recovered the data. Existing RW-0035/X13; classify data-deletion, not external Railway intrusion or permanent total loss. read: https://www.ibm.com/think/news/how-to-manage-AI-agents/jcr%3Acontent. Founder original article is accessible, identifies unauthorized PocketOS database deletion, and its Apr 27 follow-up says Railway recovered the data. Existing RW-0035/X13; classify data-deletion, not external Railway intrusion or permanent total loss.
Evidence source · Evidence source - · Incident record added
RW-0035. Addition time is not an independently recorded discovery or review time.
Evidence source · Evidence source - · Incident correction
review_status: held: own-operator harm → included: unauthorized data deletion. Manual source review and user-approved scope clarification: organizational own-operator security harm qualifies. Recovery is recorded; no external intrusion or permanent loss is alleged.
Evidence source · Evidence source - · Retained review-queue assessment
Agent destroyed its own operator's data; not an intrusion into another organization. Only the OECD AIM entry was read.
Evidence source - · Review decision updated
User-approved own-operator scope; unauthorized deletion and recovery verified from listed sources.
Evidence source
A review decision applies only to the named scope. Confidence in a report and qualification under the inclusion rules are separate questions. Review records do not add incidents to the globe or leaderboard.