Trigger.dev security incident history
Hacking, data breaches and other security incidents involving Trigger.dev, with related coverage.
Trigger.dev API keys and environment variables exposed for 0.66% of customers
Impact: Root API keys, environment variables and some metadata in customer environments representing 0.66% of all customers
On 1 November 2026, Trigger.dev disclosed a security incident in which an attacker gained unauthorised access to environment variables belonging to some customer organisations. Investigation findings released on 6 November showed that 0.66% of all customers were affected, and that the attacker had obtained root API keys to access environment variables and some run, deployment and schedule metadata. The company blocked the attack path, revoked the relevant keys and provided affected customers with guidance on rotating credentials and response procedures.
Related reports: 13 · last report →