


Just three months ago (November 2020), Spotify suffered a major credential stuffing attack where customers experienced account takeovers with their music libraries being altered and login information changed.Īccording to ThreatPost, “Researcher Bob Diachenko tweeted about the new Spotify attack on Thursday: ‘I have uncovered a malicious #Spotify logger database, with 100K+ account details (leaked elsewhere online) being misused and compromised as part of a credential stuffing attack.’” Now Spotify has suffered a second credential stuffing attack affecting 100,000 customers. It wasn’t that long ago that Spotify denied a data breach while hundreds of customers complained about their accounts being hacked.
