[Contained][Severity: Moderate][Web app exploit]

SmartNews: server flaw exploited, service halted

Attackers exploited a flaw in the SmartNews server environment and the company halted the service for a while; no leak of personal data has been found.

Disclosed

2026-10-22

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2026-10-22
SmartNews halted its service over a security problem, caused by unauthorized access that exploited a flaw in its server environment. After fixing the flaw it resumed its basic service. [1]

Impact

As of noon on 23 October no leak of personal data or ad delivery data had been found; some features were still being restored. The company treats SmartNews: points and rewards system intrusion from 31 October as a separate case. [1]

Timeline

Detected, Disclosed 2026-10-22
1 days

Attack or cause

Method: [Web app exploit]
Impact: [Service outage]
Entry point: Unknown

Data exposed or at risk

–

Services hit

[Breached][Moderate]
SmartNews

Service	Role	Impact level	Note
SmartNews	[Breached]	[Moderate]

Organizations involved

[Breached][Moderate]Tokyo, ShibuyaInformation and communications
SmartNews, Inc.

						Note
SmartNews, Inc.	[Breached]	[Moderate]	Tokyo, Shibuya	Information and communications	Unknown

Sources

[1][Official]【復旧】セキュリティ上の問題への対応について（続報）SmartNews · 2026-10-22