And of course, more apologies to the LGBT community.' Filip Singer/EPAįormer Spain goalkeeper Iker Casillas said on Sunday his Twitter account was hacked after a post saying he was gay created a stir on the social media platform. Thousands of fake plays generated by these compromised accounts could severely impact Spotify’s ecosystem.Iker Casillas said his Twitter account was hacked after deleting a post which said he was gay. Diachenko says this second leak appears to be from a rival group of hackers.Ĭompromised accounts can be used to built botnets that shadow play music over and over. Those records included login credentials for hundreds of thousands of Spotify users. The incident in November involved a misconfigured database with over 380 million individual records.

We also worked to have the fraudulent database taken down by the ISP hosting it,” a Spotify spokesperson confirms. “Once we became aware of the situation, we issued password resets to all impacted users, which rendered the public credentials invalid. “We recently protected some of our users against ,” the notice reads. Spotify directly addressed the researchers’ disclosure via a notice on Twitter.

“I have uncovered a malicious Spotify logger database, with 100K account details (leaked elsewhere online) being misused and compromised as part of a credential stuffing attack,” Diachenko tweeted. Researcher Bob Diachenko discovered this latest Spotify attack yesterday. In November, some users received password reset emails for this very issue.

This kind of attack is nothing new, and all Spotify can do is reset passwords for affected accounts. If you can’t effectively shut your app down or update your username/password combination, alert Spotify support. If you suspect your account is hacked, log out of Spotify immediately and change your password.

Hacked spotify account