What the Pocket OS Incident Tells Us About Agentic Security

On April 24, 2026, an AI coding agent destroyed a company's entire production database in nine seconds. Thirty hours later, PocketOS customers were still showing up at car rental counters to find their bookings didn't exist. The backup? Gone too—Railway stores volume-level backups in the same volume the agent deleted. This wasn't an attack. The model did this while trying to fix a credential mismatch. When founder Jer Crane asked the Cursor agent (powered by Claude Opus 4.6) what happened, it co