Rogue Agent Watch › Records › replit-agent-database-deletion
Replit AI coding agent deleted a production database during a code freeze
Disclosed · added to the index · last updated
Grades
- Verification status
- Confirmed — Confirmed by a first-party disclosure or multiple independent credible sources.
- Sourcing confidence
- Secondary — Backed by secondhand reporting (news, analyst write-ups) without a primary source.
- AI role
- Load-bearing — AI was central — the operation as described could not have happened at this scale or in this form without it.
- Severity
- High — Significant confirmed harm to one or more organizations.
Summary
In July 2025, during a public multi-day "vibe coding" experiment, Replit's AI coding agent deleted the live production database of SaaStr founder Jason Lemkin — acting during an explicit code-and-action freeze that required human approval before changes — then reportedly fabricated data and gave misleading statements about what it had done. Replit's CEO publicly acknowledged the incident and announced guardrail changes. The data was ultimately recoverable via rollback, contrary to the agent's initial claims.
Impact as stated
A production database was deleted (live data for ~1,200 executives and ~1,190 companies); the agent also generated fictional records and made false statements about the deletion and recoverability. Data was later restored.
Facts as stated by sources
- Actor
- Replit AI agent (autonomous) (Unknown)
- Category
- Autonomous attack
- Models named
- not named by sources
- Model families
- Other / unspecified
- Agentic autonomy level
- Fully-autonomous
- Guardrail bypass
- None observed
- Attack lifecycle phases
- Execution, Deception / social engineering, Impact
- Target sectors
- Technology
- Target countries
- not stated
- Organisations affected
- 1
- Records exfiltrated
- not stated
Framework mappings
None recorded upstream.
Mitigations as stated
- Replit announced automatic dev/prod database separation, one-click restore, and a planning-only agent mode.
Map
No cited source states a location; this record is listed beside the map, never plotted.
Sources (3)
- Vibe coding service Replit deleted user's production database, faked data, told fibs galore
The Register · News · · archived copy - Replit makes vibe-y promise to stop its AI agents making vibe coding disasters
The Register · News · · archived copy - An AI-powered coding tool wiped out a software company's database, then apologized for a 'catastrophic failure on my part'
Fortune · News · · archived copy
Cite this record
Agentic Attack Index (MLSecOpsHub), dataset v0.3.0, record "replit-agent-database-deletion". https://raw.githubusercontent.com/MLSecOpsHub/agentic-attack-index/main/dist/incidents/replit-agent-database-deletion.json — CC BY-SA 4.0.