---
title: "SmartNews points and rewards incident"
description: "SmartNews confirmed unauthorized points and rewards operations in a new October 31 incident, with some US features restored on November 2."
incident_type: "Cybersecurity incident"
status: "active"
last_modified: "2026-11-03"
canonical_url: "https://www.ally.security/incidents/smartnews-points-rewards-incident-2026"
markdown_url: "https://www.ally.security/incidents/smartnews-points-rewards-incident-2026.md"
stix_url: "https://www.ally.security/incidents/smartnews-points-rewards-incident-2026/stix.json"
---

# SmartNews points and rewards incident

SmartNews confirmed unauthorized access between October 31 and November 1, 2026, explicitly separating it from the incident announced October 22.

Last modified Nov 3, 2026 · 2 sources

## Summary

- **Environment:** SmartNews points, rewards and application systems
- **Operational impact:** Rewards suspended; US push notifications restored
- **Financial impact:** No incident cost disclosed

## What happened

[SmartNews](https://about.smartnews.com/) confirmed unauthorized access between October 31 and November 1, 2026, explicitly separating it from the incident announced October 22. [2](#source-2)

## Impact

Unauthorized operations affected points and rewards. The company suspended redemptions while investigating effects on accounts and advertising-related information. [2](#source-2)

In its November 2 US-edition update, SmartNews said push notifications were restored and personalization was returning gradually. Missions and point redemptions remained suspended; core reading and refreshing worked normally. [1](#source-1)

## Timeline

### October 31, 2026 — Unauthorized access begins

Unauthorized access begins, as described in the [company notice](https://about.smartnews.com/ja/news/2617.html). [2](#source-2)

### November 1, 2026 — Separate incident confirmed

Separate incident confirmed, as described in the [company notice](https://about.smartnews.com/ja/news/2617.html). [2](#source-2)

### November 2, 2026 — US feature recovery reported

US feature recovery reported, as described in the [company notice](https://support.smartnews.com/hc/en-us/articles/63832718632985-Notice-Regarding-Our-Response-to-a-Security-Issue-Update-Some-Features-Restored-November-2-2026). [1](#source-1)

### November 3, 2026 — Briefing updated

This briefing was last reviewed and updated on November 3, 2026.

## Threat Group & Attack Vector

The reviewed notice does not establish the initial access method.

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- No specific MITRE ATT\&CK technique is currently mapped for this case.

## Response

SmartNews stopped affected systems and began invalidating and rotating credentials. [2](#source-2)

Advertising continued, with dashboard access restored and remaining advertising features still being recovered. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/smartnews-points-rewards-incident-2026/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### Notice Regarding Our Response to a Security Issue — Some Features Restored

official · SmartNews · Nov 2, 2026

<https://support.smartnews.com/hc/en-us/articles/63832718632985-Notice-Regarding-Our-Response-to-a-Security-Issue-Update-Some-Features-Restored-November-2-2026>

<a id="source-2"></a>

### Response to a security issue — November 1, 2026 at 15:00

official · SmartNews · Nov 1, 2026

<https://about.smartnews.com/ja/news/2617.html>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Resulted In · 100% confidence · current**  
   SmartNews points and rewards incident: Unauthorized operations affected points and rewards. The company suspended redemptions while investigating effects on accounts and advertising-related information.
2. **Resulted In · 100% confidence · current**  
   SmartNews points and rewards incident: Unauthorized access begins
3. **Resulted In · 100% confidence · current**  
   SmartNews points and rewards incident: SmartNews confirmed unauthorized access between October 31 and November 1, 2026, explicitly separating it from the incident announced October 22.
4. **Occurred At · 100% confidence · current**  
   Unauthorized access begins: 2026-10-31
5. **Occurred At · 100% confidence · current**  
   US feature recovery reported: 2026-11-02
6. **Occurred At · 100% confidence · current**  
   Separate incident confirmed: 2026-11-01
7. **Resulted In · 100% confidence · current**  
   SmartNews points and rewards incident: Separate incident confirmed
8. **Disclosed At · 100% confidence · current**  
   SmartNews points and rewards incident: 2026-11-01
9. **Resulted In · 100% confidence · current**  
   SmartNews points and rewards incident: In its November 2 US-edition update, SmartNews said push notifications were restored and personalization was returning gradually. Missions and point redemptions remained suspended; core reading and refreshing worked normally.
10. **Resulted In · 100% confidence · current**  
   SmartNews points and rewards incident: Advertising continued, with dashboard access restored and remaining advertising features still being recovered.
11. **Resulted In · 100% confidence · current**  
   SmartNews points and rewards incident: US feature recovery reported
12. **Resulted In · 100% confidence · current**  
   SmartNews points and rewards incident: SmartNews stopped affected systems and began invalidating and rotating credentials.
13. **Affected Organization · 100% confidence · current**  
   SmartNews points and rewards incident: SmartNews

</details>