I’m sorry to hear about this! In this case, I’d recommend checking out this support article for the next steps to take.
To prevent this from happening in the future, there are many measures you can take to protect your account, such as resetting your password every few months, and not using passwords you have used on other sites. There is also a great guide here for some more measures on protecting your account.
If you see an email from Spotify, and can’t tell if it’s legit, use this checklist. Of course, Spotify makes sure that all user records and platforms are completely secure around the clock.
I hope this helps.
Help others find this answer and click "Accept as Solution".
If you appreciate my answer, maybe give me a Like.