A DNS misconfiguration resulted in an open Jenkins server being available to all.
Source: Threadpost