The popular music streaming website has just posted an announcement which states that someone gained unauthorized access to their systems and internal company data. As a result, attackers gained access to just one Spotify user account. The company stresses that this access did not divulge the user’s password, financial or payment information, and that they have since contacted the user and launched an investigation.
It may seem a bit of an over reaction to publish such an announcement that apparently only affects one user, however in the wake of last week’s massive data breach at eBay, the company is likely aiming for complete transparency.
As an extra security measure, Spotify states that they will be requiring a manual log-in for all users in the next few days, in order to re-verify account credentials. Additionally, Spotify will be releasing an automated Android upgrade which will guide users through install. This update is slated for release sometime in the next week.
Emsisoft encourages Spotify users who want to err on the side of caution to change their Spotify password as soon as possible. Though Spotify’s announcement indicates that only one account was hacked, it never hurts to update what may be a weak log-in credential, especially when it is used for a popular website.
Spotify’s official press release regarding this matter can be viewed in full here.
Have a Great (Data-Breach-Free) Day!
Emsisoft Endpoint Protection: Award-Winning Security Made Simple
Experience effortless next-gen technology. Start Free Trial