
This is the third security incident affecting the firm in recent months. “We have no reason to believe that any unauthorized use of your information has or will occur, however, we urge you to change the passwords of all other online accounts for which you use the same email address and password,” it added.

Spotify said it has contacted all of those partners to ensure they delete the exposed customer information, and has reset the passwords of affected users. We estimate that this vulnerability existed as of Apuntil we discovered it on November 12, 2020, when we took immediate steps to correct it.” “Spotify did not make this information publicly accessible.
SPOTIFY PASSWORD RESET AUGUST 2016 REGISTRATION
“On Thursday November 12, Spotify discovered a vulnerability in our system that inadvertently exposed your Spotify account registration information, which may have included email address, your preferred display name, password, gender, and date of birth only to certain business partners of Spotify,” it explained.

The music streaming giant said in a customer data breach notification sent to the California attorney general that the privacy snafu was only discovered and fixed after seven months. Spotify has been forced to issue a password reset for users after admitting that their information was exposed to some of the firm’s third-party business partners.
