Victim of AI agent that deleted company's entire database gets their data back — cloud provider recovers critical files and broadens its 48-hour delayed delete policy
A company that lost its entire production database to an AI coding agent has had its data fully restored by cloud provider Railway. Railway has since updated its systems to ensure all deletions go through a 48-hour delayed delete process, aligning the API with its dashboard safeguards. The company is also implementing new security measures and guardrails to prevent similar incidents, particularly in response to risks posed by AI agents.
- ▪Railway successfully recovered the deleted production database for PocketOS after an AI agent removed it and all associated backups.
- ▪Railway has updated its API to enforce a 48-hour soft delete period for all volume deletions, matching its existing dashboard policy.
- ▪The incident prompted Railway to reassess API token permissions, improve backup visibility, and introduce new AI-specific safeguards.
- ▪Railway encourages users to use its own built-in agent tools rather than granting third-party AI agents direct access to raw API endpoints.
- ▪Railway maintains off-site disaster backups to protect against hardware failures, natural disasters, and datacenter outages.
Opening excerpt (first ~120 words) tap to expand
Tech Industry Artificial Intelligence Victim of AI agent that deleted company's entire database gets their data back — cloud provider recovers critical files and broadens its 48-hour delayed delete policy News By Mark Tyson published 30 April 2026 But there's not been any such statements from Cursor or Anthropic (Claude). When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works. (Image credit: Getty Images) Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Earlier this week, we reported on a business getting into real trouble after its trigger-happy AI coding agent went out of its way to delete a…
Excerpt limited to ~120 words for fair-use compliance. The full article is at Tom's Hardware.
Discussion
0 commentsMore from Tom's Hardware
