Issuing a DELETE:

http://\MSB_IP:MSB_PORT/api/multicloud-titaniumcloud/v1/cloud-owner/cloud-region-id/infra_workload/

without the stack-id at the end deletes a stack in the cloud.

This can be reproduced with postman.  A stack that was present in the cloud was deleted even though a stack-id was not provided with the DELETE request.