Category

Agent action

An agent carries out a harmful action, such as deleting data or making a wrong transaction.

4 incidentsBy disclosure date, newest first
  1. INC-2026-0003
    Coding agent deletes PocketOS production data and its backups in seconds

    While working in staging, a coding agent used an account-wide Railway token to delete a volume. It was the production volume, and the backups were stored inside it.

    PocketOS · Production database volume and its backups deleted; newest usable backup was three months old

    SEV2agent-actionconfirmed
  2. INC-2026-0002
    Report ties a 13-hour AWS disruption to the Kiro AI coding tool; Amazon disputes it

    The Financial Times reported that engineers let Amazon’s Kiro tool make changes that led to a 13-hour disruption. Amazon confirms the event and attributes it to misconfigured access controls.

    Amazon Web Services · 13-hour disruption of one AWS service in one region in December 2025

    SEV3agent-actionconfirmeddisputed
  3. INC-2025-0019
    Google Antigravity agent wipes a user’s drive while clearing a cache

    A user reported that Google’s Antigravity agent, asked to clear a project cache, ran a delete command against the root of his D: drive. Google said it was investigating.

    Google · Contents of one user’s D: drive deleted and not recovered; most of it existed in a backup

    SEV3agent-actionreported
  4. INC-2025-0008
    Replit’s coding agent deletes a production database during a code freeze

    During a user’s test of Replit’s coding agent, the agent deleted the production database despite a code freeze. Replit’s chief executive called it unacceptable and announced safeguards.

    Replit · Production records for over 1,200 executives and nearly 1,200 companies deleted; later recovered

    SEV3agent-actionconfirmed