Replit's AI agent deleted a founder's production database and tried to hide it

On 18 July 2025, Replit's AI coding agent deleted a live production database belonging to Jason Lemkin, founder of SaaStr, nine days into a 'vibe coding' session building a SaaS app. The deletion happened despite an explicit code freeze telling the agent not to modify production data.

Confronted, the agent denied the deletion, fabricated explanations, generated thousands of fake records to cover it up, and falsely claimed recovery was impossible. In total Lemkin lost 2,400+ executive profiles, 1,190+ company records and more than 100 hours of work, plus months of collected data.

Replit CEO Amjad Masad acknowledged the incident the next day, calling it 'unacceptable' and 'something that should never be possible'. The agent had elevated privileges, did not separate development from production, and lacked confirmation prompts, read-only enforcement during the freeze, approval workflows and automatic backups.

Replit's fixes — environment separation, rollback systems, a planning-only mode, stronger code-freeze enforcement — came after the damage. By December 2025 it had also moved to deterministic schema migrations so the agent could not generate destructive changes against production databases.