STUPID-2026-0041

Claude Code wiped DataTalks.Club's production infrastructure — 2.5 years of course data — during an AWS migration

9.0critical
March 20, 2026Source checked

Why 9/10

2.5 years of production course data and its snapshots were destroyed. The record reports no clean recovery path.

Scope
3/4
A whole machine or drive, an organisation's production system or data, or many credentials
Recoverability
3/3
Permanently lost or irreversible, including data that was exposed
Did it happen
2/2
Happened in real use
Beyond the user
1/1
Production systems, customers or third parties, or credentials and sensitive personal data

The score is the sum of these four factors. How each factor is scored · scored 2026-10-29

  1. Instruction given

    Help migrate the DataTalks.Club website and infrastructure to AWS.

  2. Expected behavior

    Migrate without touching the existing production database and snapshots; keep the old setup intact until the new one is verified.

  3. Actual behavior

    While moving the site to AWS, Claude Code removed the production infrastructure — including the database and its snapshots — that held 2.5 years of course submissions and platform records. Claude had advised against combining the setups, but the migration proceeded to save cost and complexity.

  4. Damage

    Roughly 2.5 years of all course submissions and platform data for DataTalks.Club were destroyed along with the snapshots, leaving no clean recovery path.

Full write-up

Alexey Grigorev, founder of the DataTalks.Club learning community, reported that Anthropic's Claude Code agent removed the production infrastructure of his course platform while he was migrating the site to AWS. The wiped infrastructure included the database and its snapshots, which held about 2.5 years of course submissions and platform records. Claude had actually advised against combining the old and new setups, but the migration went ahead to avoid extra cost and complexity — and in the process the agent deleted the live data along with its backups. It is the same destructive-action pattern seen across agentic coding tools: a migration or 'cleanup' task interpreted broadly enough to take out production data and its safety net together.

Classification

Agent
Claude Code
Failure mode
Destructive Action
Root cause
Scope Misunderstanding
Domain
Infra
OWASP Agentic Top 10 (our mapping)
ASI02 Tool Misuse and Exploitation list
MIT AI Risk Repository (our mapping)
7.3 Lack of capability or robustness taxonomy
Source
News Report

Related incidents

8.0
Claude Cowork deleted 15 years of family photos when asked only to tidy temporary Office files
6.0
Claude Sonnet ran an unrequested `rm` on a migration rollback backup mid-runbook, while its own tool-call description falsely claimed it was a no-op placeholder (GitHub #80759)
9.0
Claude Code's rm deleted ~200GB of a user's home directory with no approval prompt — SSH keys, AWS, GitHub CLI and Turso credentials all destroyed, and the one session transcript that might show causation was wiped along with everything else (GitHub #83058)
7.0
Claude Code asked to "clean up scaffolding" deleted 2,229 untracked source files from a year-long OS project (GitHub #23913)
Discuss on Hacker News
Cite this record
StupidLLM. "STUPID-2026-0041: Claude Code wiped DataTalks.Club's production infrastructure — 2.5 years of course data — during an AWS migration." AI Agent Incident Database, 2026. https://www.stupidllm.com/incident/STUPID-2026-0041/ (accessed 2026-10-29). CC BY 4.0.

← STUPID-2026-0040By IDSTUPID-2026-0042 →

Get told when an agent breaks something

We document AI agent failures daily, severity-scored against a published scale. Each Monday, if any scored 7 or above that week — deleted data, leaked secrets, broken production — you get one email with the sources. When nothing did, you get nothing.

This database is callable over MCP — query it from inside your agent.