Trigger.dev says attacker accessed environment variables for a subset of organizations

Trigger.dev disclosed on November 1st that an attacker gained unauthorized access to environment variables belonging to a subset of customer organizations, and CTO Eric Allam said the exploit has been blocked and impacted owners have been emailed. Trigger.dev has not said how many organizations were affected. The company runs production background jobs and AI agents for customers, so the exposure could put the API keys and credentials those workloads depend on at risk.

Trigger.dev says attacker accessed environment variables for a subset of organizations CTO Eric Allam said the exploit has been blocked and impacted owners have been emailed, but the company has not said how many organizations were affected. By Ryan Merket https://runtimewire.com/author/ryan-merket · Published Primary source: trigger.dev https://trigger.dev/blog/security-incident-nov-2026 Why it matters Trigger.dev runs production background jobs and AI agents for customers, so access to organization environment variables can expose the API keys and credentials those workloads depend on. The incident tests whether a developer infrastructure company at Trigger.dev's reported scale can give customers a clear rotation path before exposed secrets are abused. Trigger.dev said on November 1st that an attacker gained unauthorized access to environment variables belonging to a subset of customer organizations, and that it has blocked the exploit used in the attack.… When you purchase through links in our articles, we may earn a small commission https://runtimewire.com/affiliate-monetization-standards . This doesn’t affect our editorial independence.