Trigger.dev discloses theft of customer environment variables

AI workflow platform Trigger.dev disclosed that an attacker gained unauthorized access to environment variables belonging to a subset of customer organizations, potentially exposing API keys and other credentials. The company said the exploit has been blocked and affected customers notified, but has not named which organizations were impacted.

Disclosed 1 November 2026 · Record updated 2 November 2026

Impact

Unauthorized access to environment variables (potentially including API keys and credentials) for a subset of Trigger.dev customer organizations, risking compromise of connected services and workflows.

Our coverage

Incidents

Trigger.dev says attacker stole customer environment variables

The AI workflow platform disclosed on 1 November 2026 that an intruder reached environment variables held by a subset of customer organisations.

2 Nov 2026

Sources

theregister.comhttps://theregister.com/security/2026/11/02/thieves-pilfer-environment-variables-from-trigger-ai-workflow-tool/5306998