Back to overview
Resolved

Security Disclosure: Sunday November 1st

Nov 1, 2026 at 10:50pm UTC
Affected services
API

Resolved
Nov 1, 2026 at 10:50pm UTC

There has been a security incident at Trigger.dev.

We've blocked the exploit used in this attack but our investigation has identified exposure across a subset of organizations.

The attacker gained unauthorized access to environment variables for these organizations.

We have emailed all impacted account owners with steps to mitigate.

We will follow up with more details.