Account compromised

[yanzi]

Somebody managed to take over my account.  I went onto my Sonos app and noticed some playlists that were definitely not mine.  My music stopped and when I tried logging into the Spotify app it said my password was wrong.  

Luckily I was able to reset my password.  

I noticed in "my account" that an Android phone appears in my offline devices - last synced today! I've never used an android device so this definitely appears to be someone else.  

I'm curious because I got an email last week from haveibeenpwned.com telling me my data was involved in a huge data breach (I don't mean a Spotify breach).  (https://www.troyhunt.com/password-reuse-credential-stuffing-and-another-1-billion-records-in-have-i-...)

 I'll hold my hands up and say that this is completely my own fault because my Spotify password was weak and I had used variations of it elsewhere.  I hadn't changed it since I created my account in like 2010.  After I got that email last week I changed a lot of my more important passwords - email, amazon, bank etc.  I just forgot all about Spotify.  So lesson learned.  

Is there anything else I need to worry about?  I had no card details stored as I pay via Paypal. Are any others affected?  

Edit:  Looks like they actually got in 2 days ago.  They've added loads of music... 😠 I also noticed that Spotify don't seem to send out password change notifications.  

[MonicaM_Bogota]

Hi, @yanzi!

Welcome to the Spotify Community.

In this case, the best thing to do is to log out from all devices with the steps here to make sure this doesn't happen again.

If you notice any unusual activity on your account again, our Accounts team can take a closer look at this. You can get in touch with them from any of our social media help sites: @SpotifyCares on Twitter and Spotify Cares on Facebook. Just send them a private message with your account's email address and username.

You can also use our Contact Form to get email support.

Don't hesitate to create a new thread if you need us again.