Smartsheet Incident History

On June 24, 2026, an automated workflow generated an unusually large volume of update requests in a short period, which temporarily disrupted the internal event-processing infrastructure responsible for delivering notification emails and in-app alerts. This caused approximately 85% of update request and approval request notifications to be delayed for roughly 13 hours. No data was lost—all notifications were ultimately delivered once the system recovered. We have since implemented automated recovery mechanisms and are adding safeguards to prevent oversized requests from impacting the notification pipeline in the future.

This incident has been resolved.

A fix has been implemented to resolve the missing or delayed Update / Approval Requests notifications and emails and we are monitoring the results.

The issue causing missing or delayed Update / Approval Requests notifications and emails has been identified. Our team is implementing a fix. We will provide frequent updates until we reach a monitoring status.

We are investigating reports of missing or delayed Update / Approval Requests notifications and emails via Automated Workflows as well as manual trigger. Our team is fully engaged in addressing the situation. We will provide frequent updates until we reach a monitoring status.

Starting in late May, we observed a marked increase in volume and sophistication of spam submissions to public Smartsheet Forms \(forms available to the general public and not requiring a Smartsheet login\), even with the Captcha setting enabled. This resulted in some customers experiencing an increase in unwanted spam content, frequently containing cryptocurrency or phishing links, delivered into their sheets. The activity was generated by automated bots operating through anonymized networks and proxy services. This primarily impacted but was not limited to the US region. Once the abuse was identified, we evaluated, deployed, tested, and tuned a series of protective measures over the following weeks. Because automated abuse of this kind adapts over time, addressing it requires an iterative approach: we layered multiple protections in both forms, captcha service, and the underlying infrastructure, evaluated their effectiveness against live traffic, and refined them as we learned more, adjusting or replacing measures that proved less effective. Throughout this process we also monitored and worked to correct any unintended impact to legitimate form submissions which may have occurred during this period. Automated spam is now substantially blocked down to virtually zero pass through rate and with minimal or no impact on legitimate submissions. We are also actively bringing similar protections into the Smartsheet Gov environment. As of 1:46PT, July 8th, we marked this issue as resolved. If you are still observing spam submissions please first ensure you have Captcha enabled on the form. If Captcha is enabled and you are still seeing spam, please submit a report using the “report abuse” link on your form. We always recommend applying the [highest level of forms security restriction](https://help.smartsheet.com/articles/2481836-manage-form-display-and-submission-options#toc-security) compatible with your solution and if necessary enforce [form security from the admin center](https://help.smartsheet.com/articles/2483290-apply-security-settings-forms). We will continue to monitor, tune, and strengthen these protections ongoing. This includes changes to have Captcha enabled by default for all new forms and new administrative controls rolling out for system admins to have the ability to enforce Captcha for forms managed by their plan. We know how critical our services are to our customers and apologize for any impact this incident may have had on you and your business. We promise that we will do everything we can to learn from this event and use it to drive improvement across our services to ensure that Smartsheet is a partner that can be counted on to deliver. We know that your success — and your continued trust in Smartsheet — depends on it.

This is now resolved. We are still actively monitoring spam levels as an ongoing and evolving strategy. We encourage all customers to submit support tickets for any residual spam coming through so we can continue to fine tune our solutions.

We have implemented measures to address the increased spam activity with Smartsheet public forms. We will continue monitoring and make further adjustments as needed. If you are continuing to see a high rate of spam submissions, please contact our support team so that we can investigate further.

We are aware that some customers are receiving an increased volume of unwanted spam submissions through public Smartsheet forms, even with reCAPTCHA enabled. Our teams have been actively investigating and deploying additional protections. We are observing a decrease in spam activity as we continue applying and evaluating further mitigations. Who is affected: Customers who use public forms that do not require login.

Starting at approximately 1:44 AM PT on July 15, 2026, some customers may have experienced errors when performing actions that rely on Smartsheet's authorization checks, such as access checks on assets. This was caused by a temporary issue during a routine system update that briefly caused a portion of requests to be directed to an unavailable part of our infrastructure. During this period, affected requests may have failed. The issue was identified and corrected, and normal operation was restored.

This incident has been resolved.

A fix has been implemented and we are monitoring the results.

The issue has been identified and a fix is being implemented.

We are currently investigating an issue preventing Smartsheet US from successfully loading. Attempts to log in to Smartsheet US or access items may result in loading screens that do not complete. We will provide an update in 30 minutes.