

Before that, in November of the previous year, 1,000 email addresses and passwords were also leaked on the internet. The 2016 three-batch breach was one of many that have occurred over a short period of time. Three different data dumps appeared there with user credentials, including email addresses, passwords, account types, and home countries along with renewal dates for Premium accounts. Starting in 2016, user data showed up on a website called Pastebin used for storing text and source code. This theory comes from the idea that Spotify allows independent artists to upload their music on the platform, and this is simply a way to run it up the flagpole for revenue and listens. Discussion panelists on Reddit theorize that these hacks may be a way to rack up listening points for certain artists and DJs. Compromised accounts leave users wide open for identity theft and fraud.ĭozens of hacked accounts are actually being used to play obscure artists’ music. When we find Spotify credentials, we first verify that they are authentic, and if they are, we immediately notify affected users to change their passwords.”Ĭomplaints abound from users who claim their accounts have been hacked or taken over completely. We monitor Pastebin and other sites regularly. Spotify denies that they have ever been hacked and claims that “Spotify has not been hacked. Victims have verified that the information breached was theirs, and the passwords were unique to Spotify, so they were not subject to credential stuffing. Spotify staunchly declares that their entire system is safe and secure however, that does not explain how thousands of accounts were breached in 2016 and ended up on Pastebin. Unfortunately, there is no clear pattern or evidence of how hackers are able to access Spotify user accounts. The scary part is Premium users have their bank and payment details in their profile, which means whoever hacked you, now has them. They have been locked out by hackers who have taken control. Other more serious issues include users waking up and not being able to log into their accounts anymore. Some users complain that their accounts have been hacked and used for listening to music they didn’t choose. However, starting in 2016, Spotify users have been subject to repeated data breaches, sometimes even losing control of their Premium account completely.

The service also “recommends” new music based on your lists and preferences. Premium users can easily create playlists and customize their library to their specific tastes. Millions of people use Spotify to curate their music collections. Spotify is one of the largest and most popular music streaming services out there, and they have repeatedly been hacked with user data breached and exposed online.
