The black-hat hacker world is at it again–this time, publishing hundreds of Spotify Premium user accounts online.
The user info appeared in three different online data dumps on Pastebin starting on Monday. Each dump contained email addresses with their corresponding passwords for Spotify. For some accounts, home countries, account types (such as premium or free), and account renewal dates were also published.
FORBES has confirmed with more than 80 individual users that the leaked account info was correct. Fifteen different users also confirmed that the leaked passwords were unique to Spotify.
A spokesperson for Spotify said the following about the leak: ”We monitor Pastebin and other sites regularly. When we find Spotify credentials, we first verify that they are authentic, and if they are, we immediately notify affected users to change their passwords.” However, the vast majority of users that FORBES spoke with said Spotify failed to notify them their account information had been compromised.
Spotify told users who contacted the company about their compromised accounts that it had not been hacked and their information was secure.
To find out if your account info on Spotify or elsewhere has been compromised, you can search haveibeenpwned.com.
http://www.forbes.com/sites/shelbyca.../#10f09ab32b99
Should I be worried?