← Spotify

2025 Credential stuffing and music scraping

2025 Unknown records affected Share on X

Data compromised

Credentials

Technical writeup

January: credential stuffing using prior breach credentials. December: Anna's Archive scraped 256M track metadata, 86M audio files; bypassed DRM.

Root cause

Credential stuffing; DRM bypass / scraping.

References