Spotify is forcing some of its subscribers to change their passwords following the discovery of a security bug. The bug reportedly led to user information being incorrectly shared with third parties, and Spotify is contacting users of affected accounts.
Information shared unintentionally includes e-mail addresses, passwords, display names, and more. So far there is no evidence that the information has been used for nefarious purposes and Spotify has contacted third parties and ordered them to delete the data.
Affected users will have been issued a password reset, and so will be alerted by email to continue through the process to change their account password.
Affected users should also consider changing the password on other services if they had been using it for them also.
Written by: James Delahunty @ 11 Dec 2020 2:07