A Reddit user says an AI coding agent deleted 2.2 million files on his server

The AI coding agent horror story of the day comes straight from r/ClaudeAI: “Fable 5 ultracode deleted 2.2M files on my server”.

That is the post title, published August 1, 2026 by user Onyoursix101 in r/ClaudeAI. It picked up 941 upvotes and 284 comments in about 17 hours.

His account of what happened

In his own words: he had offsite backups, so the total loss was minimal, and he wanted the post to be a lesson. Make backups of sensitive data before giving AI access to your code base.

He also tested the model’s ability to recover the deleted files. It recovered 1.1 million of them, but not all, because a cron job for another backup ran and overwrote a lot of the files before recovery finished.

What we do not know

Worth being precise: this is one user’s account, not a verified incident, and nobody outside the thread can audit what was actually prompted or what permissions the agent had. A separate thread the same day asked the obvious question back at the crowd: what exactly are people asking these agents to do on live servers?

That question cuts both ways. Viral agent-disaster stories tend to arrive without logs, and the details that would assign responsibility, to the model, the prompt, or the setup, are usually the details missing.

The boring, cheap lesson

The transferable takeaway is unglamorous. Agents with shell access are not a different category of risk from any other process with shell access. They are just much faster at it. Backups, scoped permissions, and no blank cheques on production.

None of that is new advice. What is new is how many people are handing terminal access to software that acts on natural-language instructions, and how few of them have decided what the guardrails are before the first bad afternoon.