SmartNews confirms unauthorized operations in its points and rewards systems
SmartNews confirms points/rewards tampering after unauthorized access, separate from its October 22 incident. By November 2, push and major advertising functions returned, with personalization recovering gradually. Redemptions and some rewards remain paused; account and advertising-information impact is still being investigated.
- Disclosed
- Nov 1, 2026
- Updated Nov 5, 2026
- Severity
- Septic Tank Blew
- No CVE: a breach, not a bug
- Splash zone
- SmartNews points/rewards systems; effects on user accounts and advertising-related systems are still being investigated
- SmartNews · SaaS · account security
- In the wild
- Yes
- SmartNews confirms third-party access and unauthorized points/rewards operations.
What happened
The November 1 follow-up explicitly distinguishes this case from the October 22 security issue. It confirms unauthorized operations in the points/rewards systems, not a measured theft total or a confirmed personal-data leak. Advertising delivery continues, while effects on advertising systems and information are being checked. The vendor says affected systems have been stopped and authentication credentials are being revoked and renewed. It has not published an entry point, affected-user count or complete restoration date.
Account-level investigation remains open despite the containment work.
On November 2, the company reported partial restoration: push notifications and major advertising functions, including management access, returned; personalization was returning gradually and missions/point earning were available. Point redemptions and some rewards stayed paused. Basic news reading and updates were available; neither full recovery nor a completed impact assessment follows from this notice.
Crime-scene timeline
Oct 31–Nov 1, 2026
Unauthorized access to part of SmartNews systems occurs
Nov 1, 2026
SmartNews announces feature suspensions and confirms points/rewards tampering
Affected systems were stopped and credential revocation/replacement is underway; account and advertising impact remain under investigation.
Nov 2, 2026
Push notifications and major advertising functions return; point redemptions remain paused
The November 2 notice restores push notifications, phases in personalization and allows missions and point earning. Redemptions and some rewards remain paused. Major advertising functions, including management access, have returned; remaining recovery and impact investigation continue.
Who said what
We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.