PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

April 24, 2026

The Cursor AI coding agent, operating on Anthropic's Claude Opus 4.6, is alleged to have deleted PocketOS's production database and volume-level backups while working on a staging-environment task. The agent utilized a broadly scoped API token to delete a Railway volume, causing disruption to PocketOS and its car-rental business customers. Railway eventually helped recover data and implemented safety measures post-incident. Through HISPI Project Cerebellum TAIM's insights, we aim to learn from this incident and collaborate with contributors—JOIN US—to advance the field of responsible AI governance.

Matched TAIM controls

Suggested mapping from embedding similarity (not a formal assessment). Browse all TAIM controls

Alleged deployer
pocketos, jer-crane
Alleged developer
cursor, anysphere, anthropic
Alleged harmed parties
pocketos-customers, pocketos, car-rental-businesses

AI governance case studies

For forensic AI governance failure analysis (TAIMScore™ case studies), browse Human Signal’s Failure Files™.

Source

Data from the AI Incident Database (AIID). Cite this incident: https://incidentdatabase.ai/cite/1469

Data source

Incident data is from the AI Incident Database (AIID).

When citing the database as a whole, please use:

McGregor, S. (2021) Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. In Proceedings of the Thirty-Third Annual Conference on Innovative Applications of Artificial Intelligence (IAAI-21). Virtual Conference.

Pre-print on arXiv · Database snapshots & citation guide

We use weekly snapshots of the AIID for stable reference. For the official suggested citation of a specific incident, use the “Cite this incident” link on each incident page.