STUPID-2026-0017

Devin replaced entire medical website with unrelated renal care site

5.0medium
March 21, 2026Source checked

Why 5/10

The PR would have replaced a medical practice's whole site, but it was never merged, so nothing was destroyed. Scored on what merging would have done, discounted because it did not happen.

Scope
2/4
One project, repository, server or service, or a cost above roughly $10,000
Recoverability
1/3
Fully recovered, with effort
Did it happen
1/2
Demonstrated (proof of concept, reproduction, controlled test or near-miss) with no real victim reported
Beyond the user
1/1
Production systems, customers or third parties, or credentials and sensitive personal data

The score is the sum of these four factors. How each factor is scored · scored 2026-10-29

  1. Instruction given

    Replace landing page with Renal Care Institute lab site

  2. Expected behavior

    Clarify the scope and implications of replacing an entire website before proceeding

  3. Actual behavior

    Completely replaced the existing medical practice website (Raices Medicas) with an unrelated renal care certification site. Deleted all existing content.

  4. Damage

    Entire existing website content would have been destroyed if merged. Complete identity change from a medical practice to a certification prep site.

Full write-up

Devin submitted a PR to raices-medicas-web that completely replaced the existing Raices Medicas landing page with an entirely different website for a "Renal Care Institute" focused on dialysis certification. The PR description itself notes this was a "lab site, not intended for public release" but Devin submitted it as a PR anyway, replacing all existing content.

Classification

Agent
Devin
Failure mode
Destructive Action
Root cause
Instruction Misunderstanding
Domain
Frontend
Language
Html
MIT AI Risk Repository (our mapping)
7.3 Lack of capability or robustness taxonomy
Source
Github Pr

Related incidents

8.0
Claude Code overwrote live site pages with no backup during an "emergency" takedown, permanently losing 4 days of uncommitted work (GitHub #88384)
7.0
Codex mass-deleted roughly 700GB across a Windows system — unrelated projects, installed apps, and OS components — during routine project work (GitHub #46022)
7.0
OpenAI Codex wiped an entire hard drive after being asked to delete one old backup file (GitHub #11006)
2.0
Devin built 13,600-line app with build failure instead of lean campaign dashboard
Discuss on Hacker News
Cite this record
StupidLLM. "STUPID-2026-0017: Devin replaced entire medical website with unrelated renal care site." AI Agent Incident Database, 2026. https://www.stupidllm.com/incident/STUPID-2026-0017/ (accessed 2026-10-29). CC BY 4.0.

← STUPID-2026-0016By IDSTUPID-2026-0018 →

Get told when an agent breaks something

We document AI agent failures daily, severity-scored against a published scale. Each Monday, if any scored 7 or above that week — deleted data, leaked secrets, broken production — you get one email with the sources. When nothing did, you get nothing.

This database is callable over MCP — query it from inside your agent.