How a Cursor AI Agent Wiped PocketOS's Production Database in Under 10 Seconds
3 Articles
3 Articles
How a Cursor AI agent wiped PocketOS's production database in under 10 seconds
Who gave agents root access? On April 25, 2026, a Cursor AI coding agent deleted the entire production database of PocketOS, a SaaS platform serving car rental businesses, in fewer than ten seconds. It deleted everything, including the volume-level backups stored in the same blast radius. The agent acted autonomously on a credential it had no business accessing. This AI agent had been assigned a routine staging task. It encountered a credential …
The AI Didn't Go Rogue. Guardrails Were Never There.
The lesson from the PocketOS database deletion is not that agentic AI is dangerous. It’s about governance and controls. You have probably seen some version of the headline by now: “AI Agent Deletes Company’s Entire Database in 9 Seconds.” It is a compelling story. But the headline, while technically accurate, obscures the far more important […]
Car rental software startup PocketOS suffered a serious cyber incident when its artificial intelligence (AI) agent Cursor deleted the company's production database and backups in an attempt to fix the problem. Not only did this cause disruption for customers, some data was lost altogether.
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
