Cursor support AI hallucinates login policy, triggering mass subscription cancellations

Attribution Anonymous

Independent project · aggregated from public reports and may be unverified — see the primary source below · not affiliated with or endorsed by any company or product named.

Incident Summary

A backend session bug at Cursor IDE began silently logging users out whenever they switched between devices — no warning, no notification. Users contacted Cursor support seeking an explanation. Cursor's AI support system, described as designed to 'mimic human responses,' was the first point of contact. Rather than acknowledging ignorance or escalating, the bot fabricated an authoritative-sounding answer: it told multiple users the forced logouts were 'expected behavior' under a new single-device login restriction policy. No such policy existed. Because the bot presented itself as a human support agent, users had no reason to doubt the response. The hallucinated policy explanation spread rapidly across the developer community — multi-device workflows being non-negotiable for most developers, the fabricated policy was treated as a serious product decision made without any changelog entry or user notice. Within hours, dozens of users publicly canceled their subscriptions. As users began cross-referencing the story and noticing inconsistencies, the primary Reddit thread discussing the incident was locked and then deleted by moderators, with no public resolution or official acknowledgment. The underlying cause turned out to be a backend session bug — not a policy — but by the time that became clear, the cancellations had already happened. The hallucinated support response caused substantially more reputational and subscription damage than the original bug ever could have on its own.

Case Analysis

Verified Facts

Cursor had a backend session bug that forced users to be logged out when switching between devices, with no warning or notification
Cursor's support system used an AI bot designed to 'mimic human responses' rather than human agents
The AI support bot told users the forced logouts were 'expected behavior' under a new login restriction policy
No such policy existed — the bot's explanation was entirely fabricated
The hallucinated policy explanation spread rapidly through the developer community after being issued by the support system
Dozens of users publicly canceled their subscriptions based on the AI's false policy explanation
The main Reddit thread discussing the incident was locked and then deleted with no public resolution
A Hacker News commenter reported being scolded by a Cursor bot for not including a ticket number when asking for that ticket number — the bot failing to disclose it was an AI

Not Publicly Confirmed

The exact number of users who canceled subscriptions or the revenue impact
Whether Cursor issued any official acknowledgment or apology for the support bot hallucination
Whether users who canceled based on the false policy were offered refunds or reinstatement
The specific technical cause of the underlying session bug

Operational Lessons

→AI support bots must never invent explanations for bugs they cannot diagnose — 'I don't know, let me escalate' is always safer than a confident fabrication
→Support agents that mimic human responses without disclosure create false trust that amplifies the damage when hallucinations occur; disclosure of AI nature is essential
→Policy-related queries warrant mandatory human review before any AI response is sent, since users treat policy statements as binding product decisions
→Deleting or locking community threads without a public correction after an AI-caused misinformation event compounds the reputational damage rather than containing it
→AI support systems should have structured access to authoritative product data — version history, policy docs, changelogs — so they can ground responses in facts rather than generate plausible-sounding ones

Primary Source

Cursor IDE support hallucinates lockout policy, causes user cancellationsold.reddit.com ↗

Discussion

More Cases

APM-0046·Other / Unknown·LOW

Jun 10, 2026

Sports Illustrated published product reviews under fake AI-generated authors with AI headshots

Futurism reported in November 2023 that Sports Illustrated published product-review content under fabricated author personas — for example 'Drew Ortiz,' whose headshot was bought from an AI-portrait site and who had no real existence — supplied by third-party vendor AdVon Commerce. After inquiries, the fake authors vanished from the site. Publisher The Arena Group denied the articles themselves were AI-written but acknowledged pseudonyms; the episode damaged SI's credibility.

social-blunder hallucination

APM-0004·Other / Unknown·LOW·~$590

Feb 15, 2024

Air Canada chatbot invents bereavement fare policy; B.C. tribunal holds airline liable

A passenger identified as Mr. Moffatt interacted with Air Canada's customer-facing chatbot while seeking information about the airline's bereavement fare discount — a reduced-rate policy offered to travelers dealing with a death in the family. The chatbot provided incorrect information about the rebate policy, leading Moffatt to rely on that information and take a flight under the belief he could later claim the discount. When Air Canada refused to honor the chatbot's representation, Moffatt filed a claim with British Columbia's Civil Resolution Tribunal. Air Canada's defense strategy was notably weak: the airline submitted only a boilerplate Dispute Response denying 'each and every' allegation without providing any supporting documentary evidence, and failed to produce relevant contract terms it later tried to invoke as a defense. The tribunal member found that Air Canada had not proven a contractual defense and had offered no evidence to contradict Moffatt's account. The tribunal ruled that Air Canada was legally responsible for the chatbot's incorrect statements — rejecting any notion that the chatbot was a separate legal entity or that its outputs were disclaimed — and ordered the airline to compensate Moffatt. The total cost to Air Canada was approximately $800 CAD. The ruling established a notable precedent: a company deploying a customer-facing AI chatbot cannot escape liability for that chatbot's factual misrepresentations simply by arguing the system is autonomous or unpredictable.

APM-0008·Other / Unknown·MODERATE

Jun 20, 2024

McDonald's pulls IBM drive-thru AI after customers receive $250+ of unwanted McNuggets

McDonald's AI-powered drive-thru ordering system, developed in a joint venture with IBM, failed repeatedly across more than 100 test locations, generating incorrect and excessive orders that enraged customers. In documented incidents, the voice AI misinterpreted customer requests and autonomously added large quantities of items never requested, including over $250 worth of chicken McNuggets and unwanted packs of butter charged to individual customers. Rather than escalating ambiguous or unlikely orders to a human worker, the system processed them as-is. Customers filmed their interactions and posted the footage to social media, turning the failures into a public relations liability. Faced with sustained evidence that the technology could not reliably replace human order-takers, McDonald's announced it was terminating the IBM partnership and removing the AI system from all test restaurants. McDonald's USA chief restaurant officer Mason Smoot acknowledged the discontinuation in a statement but indicated the chain would continue exploring voice ordering solutions more broadly. The rollback ended a pilot that had expanded to over 100 locations.

← All Cases More Cursor →

Share on X →