spotify password reset suspicious activity

Now Spotify’s user data has been exposed again. When this breach happened, Spotify initiated rolling password resets, leaving the database useless. “These credentials were most likely obtained illegally or potentially leaked from other sources.” “The exposed database belonged to a 3rd party that was using it to store Spotify login credentials,” the firm commented. Researchers at vpn Mentor found an open & vulnerable Elasticsearch database with more than 380 Spotify user records, including login credentials.

In this sort of attack, threat players gambled on people re-using passwords they try stolen passwords & IDs on different services to gain access to a whole range of accounts. The incident occurred during its well-publicised year-end Spotify Wrapped 2020 announcement of the year’s most popular streams.Ī week earlier, in late Nov., Spotfiy received a number of account takeovers following a credential-stuffing operation. This announcement comes just a few days after some of the streaming service’s most popular stars pages were taken over by a ‘mysterious’ malicious player named “Daniel” who used hijacked Spotify artist pages, including Dua Lipa & Pop Smoke, to proclaim his love of outgoing US President Trump & Taylor Swift.

“We have conducted an internal investigation & have contacted all of our business partners that may have had access to your account information to ensure that any personal information that may have been inadvertently disclosed to them has been deleted.” “We take any loss of personal information very seriously & are taking steps to help protect you & your personal information,” the Dec. This is at least the 3rd breach in less than a month for the world’s largest streaming service.Ī statement from Spotify about the incident explained the exposure was due to a software vulnerability that existed from April 9 till Nov. Spotify has notified users that some of their registration data was inadvertently exposed to a 3rd-party business partner, including emails addresses, preferred display names, passwords, gender & dates of birth.

Spotify password reset suspicious activity