Account Hacked

[ekaragia]

Well... my Spotify Premium account got hacked. I 've been a "loyal" customer since the early days of Spotify, like started paying for subscription 5 years ago. Yesterday I noticed unknown devices added to my device control list and magically ALL OF MY ALBUMS/ARTISTS/SONGS lists AND PLAYLISTS THAT I CREATED THE LAST FIVE YEARS GOT DELETED!!! by probably a kid who decided to use my login info available somewhere out there to access my account and started downloading for offline listening tons of music. Yay!!!

Keep up the great work Spotify! Keep investing money on changing the layout of your mobile apps instead of making it safer and protecting the IDs of the users. And the irony is that I contacted Spotify through the anonymous help option yesterday and no one has replied to me yet to advise me on what to do to secure my account. Look Spotify, we know that there are thousands of usr/pass of premium users leaked out there. At least don't deny it and make a f*ing post on what to do once an account has been accessed by someone else and we need to re-secure it. Simple things like change password? signout from all devices? 

As said, keep up the great work! And give us more reasons to start looking for alternative streaming platforms!

Cheers!

[gwyther1]

Same thing happened to me.  A new device, "Vitaly's iPhone" showed up on my device list along with a bunch of Russian music in my play lists.  I deleted that music and changed my password.  At least Vitaly didn't delete my music.  Extremely displeased with this happening.  Would like to see some announcement from Spotify on what to do if this happens in the future.  At least they should have a place where you can report you've been hacked.

[jhbkuah]

Hi 

I got my account hacked.  I saw an unidentify person was using my account to listen to sounds.  And it is listening to Vietnamese song.  I have changed my password now and will monitor to see if this happens again.  Is my Credit Card information safe?

Attached is the pic of the unknown user.

Regards

Kuah

[N8wolf]

My Account got hacked to.

- It started with a change from my Premium Student Status -> Family Premium

- Changed Mail Adress

- changed Password

-> Yesterday evening i got it back (it was a throw away adress and i just send a paswort reset)

-> I reset the password to a new 30 character Password (unique for this site only ofc)

-> at 7 am i got a mail that the Premium was cancled any my account is gone again

I cant send a Passwort reset command. it there is no account

[carlonssho]

99% of the time someone gets hacked is because they don’t use an strong password and because they use the same email:password everywhere... It’s really easy ‘hack’ accounts by bruteforcing, so don’t blame the services you use because of that

[Ano1]

---

@osornios wrote:

Hey @wwmontjoy,

The best course of action when something like that happens is to create a new account with a different email address from the one you're using (Tip: don't use the one you use for Facebook). That will give you a different Spotify username of your choice.

---

This is interesting.  My account has been hacked.  Support have looked into it, and I have new passwords etc..   The one thing I want to do is to remove all the garbage music the hacker has in the 'Recently Played Artists' section under my profile in the iOS or Desktop apps.  Everything else is fine, playlists etc..  Support told me they are unable to edit or delete 'Recently Played Artists' (RPA) history unfortunately.

Do you happen to know if my data is migrated to a new account - would all the 'Recently Played Artists' history get migrated too?  I am considering this option as a last chance way of clearing my RPA.  Note this is not 'Recently Played' - but the list under your profile when you click on it in the app.

TIA.

David.

[N8wolf]

Dear carlonssho.

I'm using PW Manager for years now. If you say 30 Char long totaly random, unique for each site isn't secure. ok... 

Even i have Layered Mail System. An Attacker isn't able to crack into the mails or even finding the Mail Server. (only with a lot of reverse engeneering)

[osornios]

@Ano1,

It's my understanding that 'Recently Played Artists' info does not migrate, so you should have a fresh start, but only someone from Spotify customer service can confirm it.

[osornios]

@N8wolf

Log out of the Spotify website in your browser and fill out this contact form. Someone from Spotify will be happy to help you out.

Make sure you are logged out of any Spotify account in your browser when using the contact form or the username and custom email field will not show up. It is important so that you can enter the information of the account you are having trouble with. If you are logged in with a different account that is not having the problem, that account info will be used and support will be confused.

You should get a reply within 24-48 hours. Don't forget to check your spam folder for responses as they may end up there.

If you get an automated email directing you to the community or help pages, you need to reply directly to that email (even if its from no-reply) and one of the customer services agents will get back to you.

Alternatively, if you prefer support via Twitter, you can tweet @SpotifyCares.

[carlonssho · Accepted solution]

When you migrate only your current following playlist and saved track/albums are migrated, You have to follow manually your artists again and also use a lot spotify to create again a listening profile to be able to acces the weekly discovery and new releases playlists and the daily mixes

[Ano1]

---

@osornios wrote:

@Ano1,

It's my understanding that 'Recently Played Artists' info does not migrate, so you should have a fresh start, but only someone from Spotify customer service can confirm it.

---

Thank you @osornios and @carlonssho 

After a blitz over the weekend my 'recently played artists' under my profile is updating.  Sometimes it seems to lag behind.  So for now I am not going to migrate to get away from the hacker's artists that were played, but it's useful to know there is a way around it.  

[Madamezara]

My premium account has also been hacked by some kid in Paraguay who's managed to change my password and the contact email address!
Sucks that the only way to restablish my account is set up a new one with a new user name! Is there no other way?!?

[osornios]

Hey @Madamezara,

I believe that's the best way to go, since connected devices stay with the old account, so you'll have a fresh start without them.

You can get in touch with support by logging out of the Spotify website in your browser and filling out this contact form. Someone from Spotify will be happy to help you out.

Make sure you are logged out of any Spotify account in your browser when using the contact form or the username and custom email field will not show up. It is important so that you can enter the information of the account you are having trouble with. If you are logged in with a different account that is not having the problem, that account info will be used and support will be confused.

You should get a reply within 24-48 hours. Don't forget to check your spam folder for responses as they may end up there.

If you get an automated email directing you to the community or help pages, you need to reply directly to that email (even if its from no-reply) and one of the customer services agents will get back to you.

Alternatively, if you prefer support via Twitter, you can tweet @SpotifyCares.

[user-removed]

Hey,

 my account has been hacked as well. I deleted all the added devices, changed my Facebook password, and went back to premium, caus it has been updated to spotify family.  

But there is still an open invitation to some wired email adress to joing my account. how can I delet that? Is there anything in terms of security I can do to avoid being hacked another time?

Thx  😃

[osornios]

Hey @user-removed

The best course of action when something like that happens is to create a new account with a different email address from the one you're using (Tip: don't use the one you use for Facebook). That will give you a different Spotify username.

Once you have this new account, fill out the contact form, and someone from Spotify will be happy to help you migrate your Premium privileges, library, playlists, friends, etc. to this new account.

[nadiehvlasmax]

Hi Spotify,

I'm a Spotify Premium user. 2 days ago my Spotify had been logged out. I've tried to login, but my codes didn't work. I asked for a new pasword, but it has gone to the wrong email adress. I have no access to the connected e-mail adress anymore, so I couldn't get the mail for a new password. 

The problem is, I pay for Spotify, but I can't listen to it.. that's insane, isn't it? As proof that's my account I've got bank statements from this month. 

The account I'm talking about is @nadiehvlasmax

Regards.

[osornios]

Hey @nadiehvlasmax

If you contact support from your account, the support reply may probably go to the email you no longer have access to.

Log out of the Spotify website in your browser and fill out this contact form. Someone from Spotify will be happy to help you out.

Make sure you are logged out of any Spotify account in your browser when using the contact form or the username and custom email field will not show up. It is important so that you can enter the information of the account you are having trouble with. If you are logged in with a different account that is not having the problem, that account info will be used and support will be confused.

You should get a reply within 24-48 hours. Don't forget to check your spam folder for responses as they may end up there.

If you get an automated email directing you to the community or help pages, you need to reply directly to that email (even if its from no-reply) and one of the customer services agents will get back to you.

Alternatively, if you prefer support via Twitter, you can tweet @SpotifyCares or message Spotify Cares Facebook.

[olliedeards]

Help please my account has been hacked but im pretty sure im still paying for the spotify premium. I can access it any way, i tried. i know its been hacked becuase my email address has been changed and it wasn't me please help. thanks.

[osornios]

Hey @olliedeards

If you contact support from your account, the support reply may probably go to the email you don't have access to.

Log out of the Spotify website in your browser and fill out this contact form. Someone from Spotify will be happy to help you out.

Make sure you are logged out of any Spotify account in your browser when using the contact form or the username and custom email field will not show up. It is important so that you can enter the information of the account you are having trouble with. If you are logged in with a different account that is not having the problem, that account info will be used and support will be confused.

You should get a reply within 24-48 hours. Don't forget to check your spam folder for responses as they may end up there.

If you get an automated email directing you to the community or help pages, you need to reply directly to that email (even if its from no-reply) and one of the customer services agents will get back to you.

Alternatively, if you prefer support via Twitter, you can tweet @SpotifyCares or message Spotify Cares Facebook.