ServiceNow tells customers a bug left some of their data exposed to the internet