# Trigger.dev leaks customer environment variables in security incident

Trigger.dev, a developer platform for running background jobs, exposed customer environment variables, which typically hold API keys, database credentials and other secrets. The incident was reported on Hacker News, and affected users are advised to rotate any credentials stored in the platform. Exposure of such variables can let attackers access third-party services and internal systems.

**Importance:** 3/5

## Sources

### Technology
- [Hacker News](https://trigger.dev/blog/security-incident-nov-2026) — Mon, 02 Nov 2026 01:09:16 +0000