Trigger.dev says an attacker accessed stored software settings, known as environment variables, for some organisations using its service. The company says it blocked the exploit used in the attack in a November 1 notice.
The notice was written by Eric Allam, Trigger.dev's chief technology officer. Its platform runs background tasks and AI agents for software teams.
These settings are read by software while it runs. They can hold credentials, including API keys that let one service connect to another. Trigger.dev's secret-sync guide shows how those values can be stored on its platform.
The disclosure does not say how many organisations were affected or when the attacker first gained access. It also does not identify which kinds of settings were reached.
The incident page is marked resolved. That does not confirm that affected customers have completed the steps sent to them. Trigger.dev says it will add more details there.
The company says it has emailed all impacted account owners with instructions. Its notice also directs anyone with questions to contact Trigger.dev.