Trigger.dev security incident history
Hacking, data breaches and other security incidents involving Trigger.dev, with related coverage.
Trigger.dev API keys and environment variables exposed for 0.66% of customers
Impact: Root API keys, environment variables, and some metadata in customer environments representing 0.66% of all customers
On November 1, 2026, Trigger.dev disclosed a security incident in which an attacker gained unauthorized access to environment variables belonging to some customer organizations. Investigation findings released on November 6 showed that 0.66% of all customers were affected, and that the attacker had obtained root API keys to access environment variables and some run, deployment, and schedule metadata. The company blocked the attack path, revoked the relevant keys, and provided affected customers with guidance on rotating credentials and response procedures.
Related reports: 13 · last report →