Trigger.dev says attacker accessed customer environment variables

An attacker gained unauthorized access to environment variables belonging to a subset of organizations using Trigger.dev, the company said in a security incident notice. Trigger.dev said it has blocked the exploit used in the attack. The company has emailed all impacted account owners with mitigation steps. It said its investigation identified exposure across those organizations and will publish updates on its status page.