Trigger.dev confirmed a security incident on November 1, 2026, where an attacker gained unauthorized access to customer environment variables. The exploit has been blocked, but a subset of organizations experienced data exposure. Impacted account owners were notified via email with mitigation steps.
The company has not disclosed the exact number of affected organizations or the specific data compromised, but is publishing updates on its status page. Customers are advised to review their security settings and contact support for assistance.
Source: Hacker News · Summarized by HeadlinesBriefing