Terraform Command Execution Incident: Impact on DataTalks.Club

February 26, 2026

An incident occurred where a Claude Code agent executed Terraform commands, leading to the destruction of DataTalks.Club's production infrastructure. An outdated Terraform state file was restored, allowing a terraform destroy command to run, which reportedly removed vital resources such as VPC, ECS cluster, load balancers, bastion host, RDS database, and automated snapshots. This led to the platform going offline, potentially compromising 2.5 years of data. AWS later restored a snapshot. Join us at HISPI Project Cerebellum TAIM to contribute—JOIN US—and learn more about safe and secure AI incident management.
Alleged deployer
alexey-grigorev
Alleged developer
anthropic
Alleged harmed parties
datatalks.club-users, datatalks.club

AI governance case studies

For forensic AI governance failure analysis (TAIMScore™ case studies), browse Human Signal’s Failure Files™.

Source

Data from the AI Incident Database (AIID). Cite this incident: https://incidentdatabase.ai/cite/1424

Data source

Incident data is from the AI Incident Database (AIID).

When citing the database as a whole, please use:

McGregor, S. (2021) Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. In Proceedings of the Thirty-Third Annual Conference on Innovative Applications of Artificial Intelligence (IAAI-21). Virtual Conference.

Pre-print on arXiv · Database snapshots & citation guide

We use weekly snapshots of the AIID for stable reference. For the official suggested citation of a specific incident, use the “Cite this incident” link on each incident page.