Trigger.dev disclosed on November 1 that an attacker accessed environment variables belonging to a subset of customer organizations. The company said it blocked the exploit and emailed affected account owners mitigation instructions; its status page also marked the incident resolved. It did not disclose the number of organizations, attack mechanism, or exposure window. Restoring service does not establish that secrets for connected services are safe, so notified customers should follow the instructions, address affected credentials, and examine related activity. A specific vulnerability or compromise of all customers should not be inferred while further findings remain pending.