In April 2016, Spotify users reported suspicious account activity after credentials associated with the service appeared online. Spotify denied that its systems had been hacked, in a statement reproduced in Spotify Community discussions. The available reports do not establish where the Pastebin list came from, how many entries were genuine, or whether any came from a Spotify breach.
What happened in April 2016?
On April 26, a Spotify Community user said someone had used their account and that their email address was being used to find them on Twitter. In a separate discussion, another user referred to a TechCrunch report about Spotify credentials appearing online and described an apparent unauthorized addition to their family plan. These were individual reports; neither established the cause or the scale of the incident.
The posts also did not verify the online list or show that Spotify’s systems were its source. Credentials associated with a service appearing online do not, by themselves, prove that the service was breached.
What did Spotify say?
On April 27, 2016, Spotify Star MattSuda reproduced this statement attributed to Spotify in a Community reply: “Spotify has not been hacked and our user records are secure. We monitor Pastebin and other sites regularly. When we find Spotify credentials, we first verify that they are authentic, and if they are, we immediately notify affected users to change their passwords.”
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
The wording also appeared in another Community reply the previous day. The posts identify their forum authors as Community members, not Spotify employees or official support representatives; the statement should therefore be understood as Spotify’s position reproduced in the forum, not as a direct company announcement there. Read the April 2016 “Hacked Account!” discussion and the “Hundreds of accounts hacked :(” discussion.
Was Spotify hacked, and how many accounts were affected?
The available contemporaneous discussions do not settle either question independently. Spotify denied a breach, but the posts do not establish the origin of the list, a verified number of genuine credentials, or a confirmed total of affected accounts. User reports of unusual activity show that some people were concerned about their accounts; they do not prove that Spotify was the source of posted credentials.
It is therefore not possible to state from these sources that Spotify was hacked, nor to treat an unverified count as the number of confirmed victims. The origin and scope of the Pastebin data remain unresolved in the cited discussions.
What to do if your Spotify account looks compromised
Spotify’s current help guidance lists warning signs including an email address changed without permission, unfamiliar playlists or playback, an altered subscription, an unrecognized connected account, unexpected login emails, or a password that no longer works. Its recommended response is to:
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minute- Reset your password. Choose one you do not use for another account.
- Sign out everywhere. Spotify says this can take up to one hour to apply.
- Review connected apps. Remove access for any third-party app you do not recognize or no longer use.
- Contact Spotify support if you cannot access the account.
See Spotify’s current guidance for an account you think has been hacked. These are general account-protection steps, not evidence about the cause of the 2016 reports.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Keep your password unique
Spotify’s Safety and Privacy Center advises using a strong password unique to Spotify and notes that no system is completely secure. A unique password helps limit the damage if credentials used on another service are exposed. See Spotify’s personal-data protection guidance.
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
