🚨 Developing: ServiceNow customers are discussing notifications about suspicious IP activity in tenant environments.
Important distinction: this is not yet a confirmed public breach disclosure. The visible evidence is a Reddit thread where users say they received notifications and are comparing impact.
If your org uses ServiceNow: review tenant logs, check for unexpected queries or unauthenticated access patterns, validate patch posture, and watch official ServiceNow channels.