Spotify Suffers Internal Data Breach

Digital music service Spotify alerted users on Tuesday after detecting unauthorized access to systems and internal company data.

It’s uncertain when the breach occurred, or who is behind the attack. Interestingly, the company has revealed that only one customer’s data has been accessed, but there’s no evidence that their password or financial information has been compromised.

The Spotify customer in question has been notified, the company said.

“Based on our findings, we are not aware of any increased risk to users as a result of this incident,” Spotify Chief Technology Officer Oskar Stål noted in a blog post.

While the company hasn’t said anything about the Spotify Android app being involved in the attack, customers accessing the service from Android devices have been instructed to upgrade their applications. iOS and Windows Phone users don’t have to take any action.

The new version of the Spotify app for Android was made available on Google Play a few hours after the data breach notification was published. Users are advised to download the application only from Google Play, the Amazon Appstore or the vendor’s official website.

After the application is upgraded, the offline playlists disappear, which means users will have to download them again in the new version. Android users will also have to re-enter their usernames and passwords the next time they want to access Spotify.

“We have taken steps to strengthen our security systems in general and help protect you and your data – and we will continue to do so. We will be taking further actions in the coming days to increase security for our users,” Stål noted.