Review suspicious activity (June 2, 2026)

[elf]

Hi all,

Is anyone else having trouble determining what happened on their upgraded instances in Australia on June 2, 2026? We’ve received logs from ServiceNow, but reviewing such a large volume of data is time-consuming. Also, since the issue was caused by a vulnerability in the upgraded ServiceNow instances, is it really our responsibility to analyze all these logs?

[Tanushree Maiti]

Hi @elf 

Raise a case (Hi Ticket) with your Servicenow Vendor. They will analysis the log and will let you know the reason  ( if any issue happened during upgrade) , what was the root cause.

In any case of any concern (escalation),  reach out to your Servicenow Account Executive.