Bug bounty research inadvertently led organizations to believe they were being breached through their ServiceNow instances.