Trigger.dev Reports Security Incident Involving Exposed Environment Variables
AI-generated image · Bay Street Wire
CTO Eric Allam confirms unauthorized access to organization secrets, prompting mitigation efforts for impacted accounts.
Trigger.dev has disclosed a security incident involving the unauthorized access of environment variables across a subset of its organizations, as first reported in a Trigger.dev blog post published November 1, 2026.
Eric Allam, the CTO of Trigger.dev, reported that the company has since blocked the exploit utilized in the attack. While the full scope of the exposure was not detailed, Allam stated that the company has contacted all affected account owners via email to provide specific mitigation steps.
Trigger.dev indicated that further updates regarding the incident will be posted to the company's status page.