Just wondering how many other JSM customers out there were impacted by this?
Interestingly, the instance URL in the body: while it read as our correct site, the actual URL for the hyperlink was another customer's instance, and the trailing full stop after it - which was also a hyperlink - had a different URL to yet another customer's instance.
I can only suggest code checks in future...
Message from Atlassian:
We are reaching out to inform you that services were mistakenly added to your Jira Service Management (JSM) instance, [instance URL removed]. We’ve included more details about what happened and instructions to delete these services below.
Please note there is no impact on the security of your data. We are bringing this error to your attention to prevent any confusion about the origin of the services and provide deletion instructions.
What happened
On November 19, 2024, between 9PM - 10PM UTC, a code error unintentionally created some services in JSM from Compass components.
The code error has been fixed; however, you may see newly created services appearing in the Services list or in the Affected Services dropdown list when creating/updating issues. If you had previously created Services for the impacted Compass components, you may notice duplicate Service names.
Next steps
We’ve addressed the root cause, though we are unable to remove these services from your instance. To remove the services, please follow the instructions below.
- Identify services that seem unfamiliar and were newly created between 9PM - 10PM UTC on November 19, 2024
- Manually remove them from the services UI*
If there are a high number of unexpected services, please respond to this ticket to request bulk removal support.
We apologize for any inconvenience this may have caused your team. We are conducting an internal post-incident review and will take the required actions to prevent this kind of incident from happening again.
