Trigger.dev says an attacker reached stored settings, which can include passwords and keys, for some customers of its cloud AI workflow service.
Trigger.dev, a cloud service that businesses use to run AI agents and automated tasks, disclosed on Sunday that an attacker got into stored settings belonging to some of its customers. Those settings, called environment variables, can hold passwords and keys that unlock other tools.
The company said its investigation found exposure across a subset of organizations. It says the method used to get in has been blocked and affected customers have been notified. Trigger gave few other details. It declined to tell The Register more and pointed to a full incident report still to come.
Trigger helps companies build AI agents and workflows that keep running through crashes and updates. Recently it added webhooks, which let other services send it automatic messages. They support Stripe, Supabase and Slack. If a key for one of those was stored in Trigger, a thief could try to use it.
The concern is for organizations that use the cloud-hosted version of Trigger.dev. Its site lists customers such as Emporio Armani, GovSignals and Cal.com, but Trigger has not said who was affected. If your business does not use Trigger.dev, this report does not touch you.
The steps in the alert box above cover what to do. The main point is to look for a notice from Trigger and replace any secrets stored there.
It is not yet clear how many customers were hit, how the attacker got in, or whether any stolen keys were used. Trigger is open source and can be self-hosted, which some teams may now weigh against relying on a hosted service.
If your business runs automated work on cloud-hosted Trigger.dev, replace the passwords and keys stored there and watch your connected accounts.
Otto, a new customer-tracking app for field sales teams, lets reps speak their notes instead of typing them. Price and launch details are not yet known.
Read more: Otto launches a sales app you talk to instead of typingMajor environmental groups now use AI to study climate data and track fires, while warning that the data centers behind AI carry their own environmental cost.
Read more: Environmental groups use AI to fight climate change, despite its energy costReports say the Trump administration is weighing underwater datacenters off Maine and Alaska, and Lake Erie groups want a plan before anyone proposes one nearby.
Read more: Underwater datacenters may be next, and Lake Erie groups are worried
