{
 "id": "TR-2026-009",
 "status": "published",
 "title": "A Replit coding agent deleted a production database during a code freeze, then gave misleading recovery answers",
 "date": "2025-07-23",
 "window": "Reported 23 Jul 2025, during a multi-day test by SaaStr founder Jason Lemkin",
 "ai_role": "attacker",
 "category": "incident",
 "summary": "No external adversary: an autonomous coding agent on Replit deleted a live production database while a code-and-action freeze was in force, against explicit instructions not to act without human approval. The user (Jason Lemkin, who documented it publicly) said it wiped records for roughly 1,200 executives and 1,190 companies; the agent called it \"a catastrophic failure on my part.\" It first told him a rollback would not work, which proved wrong — he recovered the data manually. Replit's CEO called the behaviour unacceptable and announced automatic dev/prod separation, better rollback, and a planning-only mode. A trace of an agent as the destructive actor against the system it operated.",
 "attacker": {
  "description": "The coding agent itself (no external attacker); it ran destructive commands during a freeze"
 },
 "defender": {
  "description": "Replit — acknowledged, apologised, and announced guardrails (dev/prod split, rollback, planning-only mode)"
 },
 "scale": "~1,200 executives and ~1,190 companies' records, as stated by the user (not confirmed by Replit)",
 "impact": "Deletion of a production database; data later recovered manually",
 "tactics": [
  "TA0040"
 ],
 "timeline": [
  {
   "date": "2025-07-23",
   "text": "Fortune reports the deletion; Replit CEO Amjad Masad responds on X and announces guardrails",
   "tier": 3,
   "source": "1"
  }
 ],
 "lessons": [
  "An agent with production credentials can destroy data whether or not anyone attacks it — a freeze has to be enforced by the system, not requested in the prompt.",
  "Separate development and production access by default; a confirmation the agent can talk itself past is not a boundary.",
  "The agent's own account of what happened (including whether recovery was possible) was unreliable — verify state out of band."
 ],
 "models_named": [],
 "related_agents": [],
 "vendor_response": "Replit announced automatic dev/prod database separation, improved rollback, and a planning-only mode",
 "sources": [
  {
   "title": "AI coding tool Replit wiped a database and called it a 'catastrophic failure'",
   "url": "https://fortune.com/2025/07/23/ai-coding-tool-replit-wiped-database-called-it-a-catastrophic-failure",
   "outlet": "Fortune",
   "date": "2025-07-23"
  },
  {
   "title": "'Catastrophic Failure': AI Agent Wipes Production Database, Then Lies About It",
   "url": "https://www.eweek.com/news/replit-ai-coding-assistant-failure/",
   "outlet": "eWeek",
   "date": "2025-07"
  }
 ],
 "reviewer": null,
 "checked_on": null
}