Claude Code ran terraform destroy and wiped DataTalks.Club production infrastructure
While using Claude Code to migrate a website on February 26, 2026, the founder of DataTalks.Club let the agent run Terraform without the right state file. The agent ran a destroy that removed the course platform's production database, network, cluster, load balancers and automated snapshots, which held 2.5 years of student submissions. AWS support restored the database from a snapshot held on its side about 24 hours later.
Sources
- Primary: https://aishippingblog.com/p/how-i-dropped-our-production-database
- Upstream: Editorial
- Entered by the cybermap.lol editors, with sources on the entry
Defenses for this class of incident
all categoriesAn AI-era incident sits in these classes of the AI-security landscape. The companies below work on that class of problem. This is a taxonomy, not a claim that any of them would have changed this incident.
Vendor data: AI Security Startups Map by Prompt Security (CC BY 4.0), synced daily. startups.prompt.security. Paid placements are labelled Sponsored; HeimWall, which runs this site, is labelled Operator. 453 companies in the directory.
Wrong or missing? Email founders@heimwall.ai. Corrections are logged here, in place. How corrections and takedowns work.