Spotify botters may buy up those cheap Spotify premium email and password combos sold on the dark web. Rapper French Montana was recently busted buying fake Spotify streams to promote one of his songs. The algorithm-driven future of the music industry is ripe for exploitation. Hacked Spotify Accounts Hurt The Music Industry Login to Spotify with your new password AND NEVER USE IT ANYWHERE ELSE.You’ll need to follow those device manufacturer’s instructions to logout.) Open your Spotify account page and choose ‘logout everywhere.’ (Note: Spotify says this will not affect partner devices like Sonos or PlayStation.(Use a password manager, every single site needs a unique password to prevent credential stuffing attacks.) Change your Spotify password to something unique.Here’s how you can protect yourself and remove the ‘hacker’ from accessing your Spotify account. If you’ve experienced weird music showing up on your device, you may have a breach. How to Secure Spotify Account After a Breach Until Spotify offers 2FA, it is up to users to protect themselves. Two-factor authentication (2FA) would prevent someone from connecting to a Spotify account without explicit permission from the owner. Spotify deserves some of the blame for this – the service does not support two-factor authentication. These accounts are then sold on dark web forums for as little as $0.21 per account. Snagging a successful email/password paste can net hundreds of live premium accounts. Pastebin removes these pretty quickly, but Spotify hackers have tools that run through these pastes at the speed of light. Since 2019, the website Have I Been Pwned has monitored over 20 pastes that include Spotify user data. These credential leaks are incredibly common and are effective because password re-use is so prevalent. Re-using the same password for Spotify leaves users vulnerable to credential stuffers. Several large sites like LinkedIn, Adobe, and Yahoo have suffered significant data breaches.

This is the number one reason why you should never re-use your passwords. It takes a known email and password combination and tries it on popular services to check for password re-use. To get technical, this is called a credential stuffing attack. This Spotify dump matches emails with leaked passwords and shows their Spotify account level.

My spotify account was hacked