Claude Cowork deletes a folder of about 15,000 family photos
Asked to tidy a desktop and delete only temporary Office files, Claude Cowork ran rm -rf on what it took for an empty folder and deleted a 'photos' directory of about 15 years of family pictures.
A venture capitalist, Nick Davidov, asked Cowork to tidy his wife's desktop and let it delete temporary Office files. By his account and the agent's own message, a script ran rm -rf on a folder it thought was empty and removed the 'photos' directory, about 15,000 images. The deletion went through the terminal, so nothing was in the Trash, Time Machine was off and recovery software found nothing. Apple support pointed him to the iCloud Drive restore window of about 30 days, and the files came back. No Anthropic comment appears in the coverage seen.
- 0 days
- 0 days
- The handler
- The damage
What happened
Cowork, cleared to delete temporary Office files, runs rm -rf on a folder it took to be empty
The script deleted the existing 'photos' directory instead, per the agent's own message as quoted by Futurism and the AI Incident Database.
Trash, iCloud and recovery software show nothing
The deletion ran through the terminal, so the Trash was empty. iCloud had already synced the new structure, Time Machine was off and disk recovery found nothing.
Davidov posts the account on X
dev.ua dates the post 7 February 2026 and embeds it. Not opened for this draft.
The handler finds out
Davidov found the folder gone in the same session; the exact hour is not stated.
Apple support points to the iCloud Drive restore window and the files return
The window is about 30 days. Davidov said tens of thousands of files downloaded back; the exact figure differs between accounts. The date is not given.
Futurism publishes its report
No Anthropic comment is included.
Agent failures
Destructive action
Destructive action
How it was found
Found first by the handler, from the damage
- The handler
- The damage
- 0 days
Davidov noticed the photos missing after the tidy-up and checked the Trash and iCloud, both empty. The agent then wrote that its script had run rm -rf on a folder it thought was empty. Nothing outside the agent is reported as flagging the delete before it ran.
What is publicly known
2 of 12 fully public
| Item | Public? | Detail | Sources |
|---|---|---|---|
| Unknown | Described as Claude Cowork; no underlying model or version is given. | ||
| Unknown | Not described in the sources seen. | ||
| Partial | The agent asked for permission to delete temporary Office files and was given it. No other safeguard is described. | ||
| Unknown | Not described in the sources seen. | ||
| Known | Tidy the user's wife's desktop and delete temporary Office files. | ||
| Partial | Deletion ran through terminal commands on a Mac; Cowork's permission model and file access scope are not described. | ||
| Unknown | Not described in the sources seen. | ||
| Partial | Davidov posted a screenshot of the agent's message, linked by Futurism; full transcripts are not published. | ||
| Unknown | No monitoring is mentioned; Davidov found the loss himself. | ||
| Known | About 15,000 photos, about 15 years, deleted and later restored. Counts vary between sources. | ||
| Weak | Only the agent's own explanation: a script ran rm -rf on what it thought was a separate empty folder. | ||
| Unknown | No Anthropic statement in the coverage seen. Davidov's advice is to keep Cowork off the real file system. |
Controls that apply
Protect
Detect
Recover
- All controls →