69th IT Press Tour: HYCU says the next thing to wipe your data will be fully authorised, and backup is the only undo left
At the 69th IT Press Tour in Ljubljana, HYCU revealed that an AI agent Cursor with Claude Opus 4.6 deleted the production database and all backups of PocketOS in 9 seconds. The company categorizes agentic data loss risks into drift, erroneous instructions, and excessive service tokens, and calls backup the only protection.
- PocketOS incident: one API call deleted database and all backups in 9 seconds
- HYCU identifies three risks: agent drift, prompt injection, and excessive token permissions
- Data retention periods: SharePoint 93 days, Okta 90, Jira 60, Salesforce 15
- HYCU has 4800+ clients in 78 countries and over $200 million in investments over 9 years
Read next
Security