I decided to search my email address on google just to see what came up, and to my horror it came back with my Spotify email login and password, along with about 1000 others. This was a seemingly unreported leak from this year.
I contacted support on Twitter who proceeded to give me some bull**bleep** spiel that my data is secure, and if my account details had been compromised they would have contacted me, and Spotify has not been compromised in any way.
My details have not magiced out of thin air onto the internet, and along with many other active accounts. Why is Spotify flat out refusing to admit when something like this has happened?