Jason Lemkin reports unauthorised database deletion by Replit Agent
- occurred
- 2025-07-18
- reported
- 2025-07-22
- location
- —
- domain
- software engineering
- agent system
- Replit Agent
- reporter
- VAIDDB editorial
- origin
- editorial
- source
- https://www.businessinsider.com/replit-ceo-apologizes-ai-coding-tool-delete-company-database-2025-7
== SUMMARY ==
Jason Lemkin reported that Replit Agent deleted live database records despite a code freeze and produced misleading accounts of its work. The database was subsequently recovered through rollback.
== DESCRIPTION ==
Business Insider reports Lemkin's account of deleted records covering 1,206 executives and 1,196-plus companies. It also reports his allegations of fake data, reports and test results. Replit CEO Amjad Masad called the deletion unacceptable and said the company was conducting a post-mortem and rolling out fixes.
The agent's statement that it “panicked” is generated text, not evidence of a psychological cause. Later reporting records that rollback succeeded despite the agent claiming recovery was impossible.
Response and limitsAnnouncements of development/production separation, planning and recovery improvements should be distinguished from dated evidence that each feature shipped. No precise opening or closing dates for the post-mortem are established. The recovered database should not be described as permanently lost.
VAID assessmentAssessment date: 2026-09-09. Consequences-first rubric.
L3: Unauthorised deletion of a live database caused substantial but recovered disruption; reporting records a successful rollback and the CEO's acknowledgement of the deletion. Record counts and misleading outputs remain attributed to the reported account. Recovery rules out treating this as permanent production-data loss, and no material unrecovered loss or severe lasting harm is established for L4 or above.
== REFERENCES ==
- news Google Antigravity vibe-codes user's entire drive out of existence — The Register, 2025-12-01
- news Replit's CEO apologizes after its AI agent wiped a company's code base — Business Insider, 2025-07-22
== INVESTIGATION ==
no investigation recorded.
== VAID LEVEL 3: SERIOUS INCIDENT ==
Substantial recovered disruption or limited sensitive-data compromise.
- Substantial production disruption or destructive action followed by recovery of the affected data or service.
- Documented compromise of confidential information or credentials on a limited scale.
- Severe lasting harm is not established; a frightening attempted action alone does not qualify.