
Business Software Bug Exposed Some Company Data to the Internet
ServiceNow, software used by thousands of companies, had a security bug that left some customer data accessible online.
Source
TechCrunch Security
Original headline: ServiceNow tells customers a bug left some of their data exposed to the internet
Plain-English summary by GetCyberRight. Read the full report at the source above.
ServiceNow, a software platform used by thousands of businesses to manage their internal operations, notified customers about a security bug. The bug caused some customer data to be exposed to the internet where it should have been private. ServiceNow confirmed that several customers had their data accessed because of this security flaw. This affects you indirectly if you are a customer or employee of a company that uses ServiceNow. Many large companies use this platform to handle employee requests, track IT issues, manage HR tasks, or coordinate customer service. If your employer or a company you do business with uses ServiceNow, your personal information in their systems may have been exposed. This could include your name, email address, employee ID, or details about service requests you made.
Here is what you should do right now.
- Watch for notifications from your employer or any companies you do business with about a ServiceNow data exposure.
- If you receive such a notification, follow their specific instructions carefully.
- Be extra cautious about emails that appear to come from your employer or service providers, especially if they ask you to click links or provide information. Scammers often follow data breaches with phishing attacks.
- Monitor your accounts for any unusual activity.
- If you use the same password for work accounts and personal accounts, change your personal account passwords immediately. This incident shows that even when you protect your own information carefully, it can be exposed because of problems with software your employer or service providers use. You cannot prevent every data exposure, but you can limit the damage. Use a unique password for every important account so that one breach does not compromise everything. Enable two factor authentication wherever possible. Stay alert for suspicious emails, especially after hearing about any data breach. Keep an eye on your financial accounts and credit report throughout the year.
Curated from trusted cybersecurity sources by GetCyberRight
Source: TechCrunch SecurityStay ahead of cyber threats
Get our free weekly digest. Real threats, plain language, what to do about them. No spam, ever.
More articles
Free Cybersecurity Certification Could Open Career Doors for Your Family
ISC2 now offers a completely free, employer-recognized cybersecurity certification with no prerequisites. This could be a career game-changer.
3 min readWhy Federal Patching Rules Matter for Your Home Cybersecurity
CISA's new four-factor vulnerability system changes how agencies prioritize patches. This smarter approach works for families too.
3 min readFree Cybersecurity Certification Now Available for Everyone
ISC2 removed the cost barrier to entry-level cybersecurity certification, offering free training and exams for anyone interested in learning security fundamentals.
3 min readFast Growing Ransomware Gang Targets Businesses Across the Country
A ransomware group called The Gentlemen has become one of the most active threat groups by rapidly recruiting skilled hackers with high payment promises.
2 min read