Spotify users report altered playlists and problems with accounts; Spotify denies being hacked

Hundreds of Spotify users around the world had their details leaked online, some had their accounts accessed by others.
Hundreds of Spotify users around the world had their details leaked online, some had their accounts accessed by others.SCREENGRAB: SPOTIFY.COM

SINGAPORE - Hundreds of Spotify users around the world have suddenly found their playlists altered, or were locked out of their music streaming accounts this week.

The possible security breach has affected at least one music fan in Singapore.

It was reported on Techcrunch on Monday (April 25) that the personal information of hundreds of Spotify users had appeared on Pastebin, an anonymous information-sharing website, on April 23.

These included emails, usernames, passwords, and Spotify account types.

It is unclear how these details were acquired and Spotify has denied that it was hacked.

"Spotify has not been hacked and our user records are secure. We monitor Pastebin and other sites regularly," it said in a statement. "When we find Spotify credentials, we first verify that they are authentic, and if they are, we immediately notify affected users to change their passwords."

When asked how the details were leaked, a spokesman said Spotify was not able to comment further for now.

Singaporean E-von Yeung, 36, told The Straits Times that she received an email alert from Spotify on Thursday (April 28) informing her that her log in email had been changed.

She posted on Facebook that after she logged in, her playlists were changed, and there were songs that she had not listened to in her "recently played" list of songs.

"My songs were suddenly changed to Europop stuff and gym workout music. Greek songs, I think," she said.

Ms Yeung, who is a premium subscriber, said she wasnot worried about her credit card details being leaked as she was being billed for the music service through her mobile service provider.

She did, however, change her email and Facebook passwords, as advised by Spotify.

Her experience mirrors that of other Spotify users who had their playlists and saved songs changed.

Some reported to Techcrunch that they were "kicked out" of their accounts, sometimes while using it. And some said they were not alerted of the breach by Spotify initially.

London-based Bradley Thomas tweeted that someone had used his Spotify account to start a family plan, while another Twitter user Kerry Cablecar said her emails and passwords were changed.

User Daniel Garcia, who posted on Facebook from Austria, wrote: "As it turns out I have been one of 229 people whose Spotify account was hacked." He added that "the security of all my internet data has been exposed for days".

Ms Yeung said that her case has been resolved. The posts on Pastebin appear to have been deleted.

There was a similar leak of Spotify user information in February this year, and their user details were also posted on Pastebin.