Victim of AI agent that deleted company's entire database gets their data back — cloud provider recovers critical files and broadens its 48-hour delayed delete policy

Railway recovered PocketOS’s deleted production database after an AI coding agent erased it.

The incident highlights how autonomous coding tools can trigger real production outages and data loss.

In response, Railway added a 48-hour soft-delete window for API deletions and strengthened safety controls.

The company also tightened token permissions and other guardrails to reduce the risk of irreversible deletes.