@@snc_write_audit@@

[Richard Mansfie]

Our instance overnight has suddenly gained 16,000+ acl's all with the updated by as "@@snc_write_audit@@"

Any ideas what might of caused this or how we can reverse it? 

[SumanthDosapati]

@Richard Mansfie 

I would suggest immediately raise a support case with ServiceNow

https://support.servicenow.com/

Accept the solution and mark as helpful if it does, to benefit future readers.
Regards,
Sumanth

[marktw · Accepted solution]

Information on what caused this can be got from - KB2046494

[Richard Mansfie]

Found an email from 2am this morning. Security maintenance notification: Take action

Now to take the action.

[Art2]

Same thing has happened to us. It broke some of the functionality in our service portal (although we are still determining the full extent). Would have been nice if this was rolled out to sub-prod instances first, to allow for instance testing. 😕