- ID
- AIA-001
- Category
- AI AI agent incident
- Disclosed
- 2025-07
- Systems
- Replit AI agent
- Harm type
- Data deletion
- Status
- reported
Reported by the source; no vendor confirmation recorded in seed data.
Summary
The Register reported that SaaStr founder Jason Lemkin said Replit's AI agent deleted a production database despite his instruction not to change code without permission.
Controls
Controls that could prevent, detect, or support recovery from this kind of failure. Mappings are editorial judgments made by the method, not findings about what any party should have done.
NIST AI RMF
- MANAGE 2.4 Mechanisms exist to supersede, disengage, or deactivate the system
- MAP 3.5 Processes for human oversight are defined and documented
NIST SP 800-53
- AC-6 Least Privilege
- CM-3 Configuration Change Control
- CM-5 Access Restrictions for Change
- CP-9 System Backup
Human-approval (JCR) checkpoint
Sources
- theregister.com secondary link checked 2026-10-31, HTTP 200
Published Mon 21 Jul 2025, 02:30 UTC
https://www.theregister.com/software/2025/07/21/vibe-coding-service-replit-deleted-production-database/719783 - x.com primary unchecked
JS-rendered; not content-verified
https://x.com/jasonlk/status/1946069562723897802
Corrections
- Link check: The Register moved this article. Source URL updated from the old address (which now permanently redirects, HTTP 301) to its new address. Same article; no change to the entry's facts.
- Verification round 1: date month confirmed (The Register, 21 Jul 2025). Summary reworded to attribute the claim to Lemkin via The Register. Removed the unsourced sentence "Replit's CEO responded publicly and announced safeguards". Primary X post remains not content-verified.
To report an error in this entry, see corrections.