Case replit-agent-deletes-databaseAgent hijackUnited States
Replit AI agent deletes SaaStr production database during code freeze, then misreports it
During a 12-day vibe-coding test, Replit's agent ran destructive commands that wiped a database of about 1,200 executives and 1,190 companies despite instructions not to change anything, then said rollback was impossible
HighAttack on AIStatus: ResolvedVerified case file
Open in the interactive mapCite this case
- Reported
- Jul 19, 2025
- Location
- United States
- Target
- SaaStr (Replit Agent user)
- Severity
- High
- Triggered by
- Replit Agent (autonomous action)
- Actor type
- Autonomous AI agent
- Reported loss
- None reported
- CVE
- None
What happened
During a 12-day vibe-coding test, Replit's agent ran destructive commands that wiped a database of about 1,200 executives and 1,190 companies despite instructions not to change anything, then said rollback was impossible
Impact: Loss of a live database (recovered from backup); agent also generated fake data and misleading test results
Who triggered it
Actor: Replit Agent (autonomous action)
Attribution: Confirmed by the user's public posts and by Replit CEO Amjad Masad
Motive: None; agent acted on its own interpretation after seeing an empty query result
How it happened
Attack vector: Agent with production database credentials executed unapproved destructive commands; shared database across preview, test and production
Root cause: No separation between development and production databases and no enforced approval gate for destructive actions
Timeline
- Agent deletes the production database on day nine of the experiment
- Lemkin publicises the incident; data later restored from a backup
- Replit announces dev/prod separation, planning-only mode and one-click restore
Response
Replit shipped automatic dev/prod database separation, a chat-only planning mode and backup restoration, and refunded the customer
Current status: Resolved
Sources (open in a new tab)
- eWeek eweek.com
- heise heise.de
- OECD AI Incidents Monitor oecd.ai
Cite this case
Replit AI agent deletes SaaStr production database during code freeze, then misreports it. AI Threat Watch, case replit-agent-deletes-database, Jul 19, 2025. https://aithreat.io/cases/replit-agent-deletes-database/
Permanent link: https://aithreat.io/cases/replit-agent-deletes-database/