Trigger.dev reported a leak of client environment variables

The Trigger.dev platform experienced a security incident recorded on November 1, 2026. As a result of unauthorized access, attackers were able to obtain client secrets.

The attack affected environment variables for a specific subset of organizations using the service. At this time, the company's specialists have blocked the exploit vector and prevented further unauthorized access to the infrastructure.

The service team is conducting an internal investigation and notifying affected users of the need to urgently rotate compromised keys and secrets to protect their systems.