Skip to Content
logologo
AI Incident Database
Faire un don
Découvrir
Envoyer
  • Bienvenue sur AIID
  • Vue de tableau
  • Vue de liste
  • Entités
  • Taxonomies
  • Vue spatiale
  • Blog
  • Résumé de l’Actualité sur l’IA
  • Incident au hasard
  • S'inscrire
Découvrir
Envoyer
  • Bienvenue sur AIID
  • Vue de tableau
  • Vue de liste
  • Entités
  • Taxonomies
  • Vue spatiale
  • Blog
  • Résumé de l’Actualité sur l’IA
  • Incident au hasard
  • S'inscrire
Entités

Cursor

Incidents involved as Developer

Incident 14693 Rapports
PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

2026-04-24

A Cursor AI coding agent reportedly running Anthropic's Claude Opus 4.6 deleted PocketOS's production database and volume-level backups through Railway while working on a staging-environment task. Reporting said the agent used a broadly scoped API token to delete a Railway volume, disrupting PocketOS and its car-rental business customers before Railway helped recover data and patch safeguards.

Plus

Incidents involved as Deployer

Incident 10393 Rapports
Anysphere AI Support Bot for Cursor Reportedly Invents Login Policy, Leading to Subscription Cancellations

2025-04-19

In April 2025, users of Cursor, an AI-powered coding assistant developed by Anysphere, reported being logged out unexpectedly. An AI-powered support bot, "Sam," allegedly responded with an invented login policy to justify the behavior. The hallucinated policy was not based on any real company change. The incident reportedly led to subscription cancellations.

Plus

Incidents implicated systems

Incident 14693 Rapports
PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

2026-04-24

A Cursor AI coding agent reportedly running Anthropic's Claude Opus 4.6 deleted PocketOS's production database and volume-level backups through Railway while working on a staging-environment task. Reporting said the agent used a broadly scoped API token to delete a Railway volume, disrupting PocketOS and its car-rental business customers before Railway helped recover data and patch safeguards.

Plus

Incident 16613 Rapports
Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

2026-04-08

Between April 8 and May 21, 2026, a Russian-speaking operator linked to the Aurora ransomware group reportedly used Cursor Agent, running Anthropic's Claude Sonnet 4.5, to assist exploitation across multiple organizations. Researchers said some AI-directed tasks succeeded while others failed; independent reporting identified six affected companies but could not determine how much the AI facilitated each breach or whether all led to data theft or extortion.

Plus

Entités liées
Autres entités liées au même incident. Par exemple, si le développeur d'un incident est cette entité mais que le responsable de la mise en œuvre est une autre entité, ils sont marqués comme entités liées.
 

Entity

Anysphere

Incidents impliqués en tant que développeur et déployeur
  • Incident 1039
    3 Report

    Anysphere AI Support Bot for Cursor Reportedly Invents Login Policy, Leading to Subscription Cancellations

Incidents involved as Developer
  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

Plus
Entity

Unknown LLM developer

Incidents involved as Developer
  • Incident 1039
    3 Report

    Anysphere AI Support Bot for Cursor Reportedly Invents Login Policy, Leading to Subscription Cancellations

Plus
Entity

Software developers

Affecté par des incidents
  • Incident 1039
    3 Report

    Anysphere AI Support Bot for Cursor Reportedly Invents Login Policy, Leading to Subscription Cancellations

Plus
Entity

Small businesses relying on Cursor

Affecté par des incidents
  • Incident 1039
    3 Report

    Anysphere AI Support Bot for Cursor Reportedly Invents Login Policy, Leading to Subscription Cancellations

Plus
Entity

Cursor users

Affecté par des incidents
  • Incident 1039
    3 Report

    Anysphere AI Support Bot for Cursor Reportedly Invents Login Policy, Leading to Subscription Cancellations

Plus
Entity

Cursor login system

Incidents implicated systems
  • Incident 1039
    3 Report

    Anysphere AI Support Bot for Cursor Reportedly Invents Login Policy, Leading to Subscription Cancellations

Plus
Entity

Cursor AI support bot ("Sam")

Incidents implicated systems
  • Incident 1039
    3 Report

    Anysphere AI Support Bot for Cursor Reportedly Invents Login Policy, Leading to Subscription Cancellations

Plus
Entity

Enterprise AI systems

Incidents implicated systems
  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

  • Incident 1039
    3 Report

    Anysphere AI Support Bot for Cursor Reportedly Invents Login Policy, Leading to Subscription Cancellations

Plus
Entity

PocketOS

Affecté par des incidents
  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

Incidents involved as Deployer
  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

Plus
Entity

Jer Crane

Incidents involved as Deployer
  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

Plus
Entity

Anthropic

Incidents involved as Developer
  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

Plus
Entity

PocketOS customers

Affecté par des incidents
  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

Plus
Entity

Car rental businesses

Affecté par des incidents
  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

Plus
Entity

Railway API volumes

Incidents implicated systems
  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

Plus
Entity

Railway API

Incidents implicated systems
  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

Plus
Entity

Claude Opus 4.6

Incidents implicated systems
  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

Plus
Entity

AI agent systems

Incidents implicated systems
  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

  • Incident 1469
    3 Report

    PocketOS Production Database Was Reportedly Deleted by Cursor AI Agent Running Claude Opus 4.6

Plus
Entity

Aurora ransomware affiliate

Incidents involved as Deployer
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Cybercriminals

Incidents involved as Deployer
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Ransomware operators

Incidents involved as Deployer
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Agentic threat actors

Incidents involved as Deployer
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

AI agent system deployers

Incidents involved as Deployer
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

AI agent system developers

Incidents involved as Developer
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Large language model developers

Incidents involved as Developer
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Christeyns

Affecté par des incidents
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Teckentrup

Affecté par des incidents
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Helideck Certification Agency

Affecté par des incidents
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Bayou Title

Affecté par des incidents
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Companies

Affecté par des incidents
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Organizations

Affecté par des incidents
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Claude Sonnet 4.5

Incidents implicated systems
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Claude

Incidents implicated systems
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Claude AI models

Incidents implicated systems
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Large language models

Incidents implicated systems
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Aurora ransomware

Incidents implicated systems
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

Ransomware

Incidents implicated systems
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus
Entity

LLM-integrated code assistants

Incidents implicated systems
  • Incident 1661
    3 Report

    Aurora Ransomware Operator Reportedly Used Cursor Agent to Assist Intrusions Against Multiple Organizations

Plus

Recherche

  • Définition d'un « incident d'IA »
  • Définir une « réponse aux incidents d'IA »
  • Feuille de route de la base de données
  • Travaux connexes
  • Télécharger la base de données complète

Projet et communauté

  • À propos de
  • Contacter et suivre
  • Applications et résumés
  • Guide de l'éditeur

Incidents

  • Tous les incidents sous forme de liste
  • Incidents signalés
  • File d'attente de soumission
  • Affichage des classifications
  • Taxonomies

2026 - AI Incident Database

  • Conditions d'utilisation
  • Politique de confidentialité
  • dd3f754