ServiceNow is warning about a security incident after attackers exploited an unauthenticated access flaw through a vulnerable API endpoint, allowing them to query data from customer instances. [...]

https://www.bleepingcomputer.com/news/security/servicenow-discloses-security-incident-exposing-customer-data/