A security bug in ServiceNow exposed some enterprise customer data to the public internet, and several customers had their data accessed.
ServiceNow notified customers that a flaw in its platform had left some of their data publicly accessible online. Several customers had data accessed as a result. The company automates internal processes for thousands of enterprises, handling workflows that typically cover IT service requests, HR operations, and procurement.
ServiceNow sits at the operational center of many large organizations. It's where employees file tickets, where IT teams track incidents, and where sensitive internal data moves constantly. A bug that makes that data public isn't an edge-case risk. It's the kind of exposure that triggers incident response teams and ends up in breach notification letters.
Back-office software vendors rarely face the scrutiny of consumer apps, but they often hold data that's more sensitive than anything in a consumer product. ServiceNow won't be the last to find that out the hard way.