---
title: Trigger.dev customer environment variables exposed
link: https://trigger.dev/blog/security-incident-nov-2026
source: hnrss-org
published: 2026-11-02T01:09:16Z
updated: 2026-11-02T01:09:16Z
first_seen: 2026-11-02T16:59:20.971254334Z
authors:
- anurag
content: extracted
html: 2026-11-02-trigger-dev-customer-environment-variables-exposed.html
remote_preview:
  url: https://trigger.dev/blog/generic/incident-report-generic.png
  alt: 'Image for Security Disclosure: Sunday November 1st'
---

[Incident report · November 1, 2026 View all blog posts](https://trigger.dev/blog)

[![Eric Allam](https://trigger.dev/blog/authors/eric.png)](https://x.com/maverickdotdev)

[Eric Allam](https://x.com/maverickdotdev)

CTO, Trigger.dev

![Image for Security Disclosure: Sunday November 1st](https://trigger.dev/blog/generic/incident-report-generic.png)

There has been a security incident at Trigger.dev.

We've blocked the exploit used in this attack, but our investigation has identified exposure across a subset of organizations.

The attacker gained unauthorized access to environment variables for these organizations.

We have emailed all impacted account owners with steps to mitigate.

We will publish updates on our [status page](https://status.trigger.dev/incident/1110434?mp=true), and you can [contact us](https://trigger.dev/contact) if you have any questions.