Security Experts:

Connect with us

Hi, what are you looking for?



Spotify Suffers Internal Data Breach

Digital music service Spotify alerted users on Tuesday after detecting unauthorized access to systems and internal company data.

Digital music service Spotify alerted users on Tuesday after detecting unauthorized access to systems and internal company data.

It’s uncertain when the breach occurred, or who is behind the attack. Interestingly, the company has revealed that only one customer’s data has been accessed, but there’s no evidence that their password or financial information has been compromised.

The Spotify customer in question has been notified, the company said.

“Based on our findings, we are not aware of any increased risk to users as a result of this incident,” Spotify Chief Technology Officer Oskar Stål noted in a blog post.

While the company hasn’t said anything about the Spotify Android app being involved in the attack, customers accessing the service from Android devices have been instructed to upgrade their applications. iOS and Windows Phone users don’t have to take any action.

The new version of the Spotify app for Android was made available on Google Play a few hours after the data breach notification was published. Users are advised to download the application only from Google Play, the Amazon Appstore or the vendor’s official website.

After the application is upgraded, the offline playlists disappear, which means users will have to download them again in the new version. Android users will also have to re-enter their usernames and passwords the next time they want to access Spotify.

“We have taken steps to strengthen our security systems in general and help protect you and your data – and we will continue to do so. We will be taking further actions in the coming days to increase security for our users,” Stål noted.

Written By

Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Expert Insights

Related Content


Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.


The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.


The FBI dismantled the network of the prolific Hive ransomware gang and seized infrastructure in Los Angeles that was used for the operation.


A new study by McAfee and the Center for Strategic and International Studies (CSIS) named a staggering figure as the true annual cost of...


A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Application Security

PayPal is alerting roughly 35,000 individuals that their accounts have been targeted in a credential stuffing campaign.


CISA, NSA, and MS-ISAC issued an alert on the malicious use of RMM software to steal money from bank accounts.


The degree of danger that may be introduced when adversaries start to use AI as an effective weapon of attack rather than a tool...