ServiceNow applied a security update after an API access issue exposed customer data, with affected firms notified through direct support cases.