Trigger.dev breach exposes customer environment variables

Trigger.dev customer environment variables exposed

Trigger.dev has disclosed a security incident in which an attacker gained unauthorized access to environment variables for a subset of organizations. The company says it has blocked the exploit and emailed all impacted account owners with mitigation steps, with further updates to be posted on its status page. CTO Eric Allam signed the disclosure, published November 1, 2026.