United States1 source
Confirmed:Confirmed by the organisation, a regulator or a securities filing. First reported 1 Nov 2026.
Developer/AI-agent platform Trigger.dev confirmed on 1 November that an attacker accessed environment variables of several customer organisations (API keys, credentials, secrets). The exploit method was blocked and affected organisations notified.
Not sure? Ask an assistant with the sources attached, or have a coding agent check your systems.
Check your systems for Trigger.dev
Confidence 55% that this is real and correctly placed. Locations are city centroids at best. Spotted an error? Report a correction.