ServiceNow to customers: A bug may have exposed your data on the internet

ServiceNow has alerted customers to a software bug that allowed unauthenticated internet users to access their data. The company patched the issue on June 5, 2026, after detecting evidence of successful queries on instance tables for a subset of customers. Network defenders suggest checking logs for a specific IP address as an indicator of potential data access.

By TOI TECH DESK