[News](/news) Spotify data breached for the third time in 2020 [Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news) # Spotify data breached for the third time in 2020 ##### [Edward Kost](/team/edward-kost) December 21, 2020 Music streaming titan Spotify has suffered its third data breach in the space of just a few weeks. Spotify revealed in [its official statement](https://oag.ca.gov/system/files/Copy%20of%20Spotify%20Breach%20Notice%20Letter%20%28CALIFORNIA%29.DOCX_.pdf), that the account registration information of its users was inadvertently exposed to some of Spotify’s business partners. The first Spotify breach occurred in late November where up to three hundred and fifty thousand user accounts were compromised after a [successful credential stuffing attack](https://www.upguard.com/blog/data-breach).  In a credential stuffing attack, cyber attackers attempt to login into accounts using credentials from different services accessed in historical data breaches. Since users are likely to recycle passwords, a single breach gives threat actors access to a swathe of services. A week after this event, a cyber attacker calling himself“Daniel” compromised several celebrity Spotify pages, replacing their information with messages for people to follow him on Snapchat, signing off with “Trump 2020.” Daniel also proclaimed his love for Taylor Swift in his messages and even replaced some artist profile images with those of Taylor Swift. Users published evidence of compromised artist pages on Twitter. > DID SOMEBODY HACK LANA'S SPOTIFY HJKNFGHDJKVHJLBKLB [pic.twitter.com/cWcAdV6YDO](https://t.co/cWcAdV6YDO) > > — rosa; nanamin edit 📌 (@rinsbachi) [December 2, 2020](https://twitter.com/rinsbachi/status/1334022057776988162?ref_src=twsrc%5Etfw) Because this data breach exposed [sensitive information](https://www.upguard.com/blog/sensitive-data) to Spotify’s [third-party network](https://www.upguard.com/product/vendorrisk), and not cybercriminals, the breached data may not be used for sinister activities. Let’s hope the recipients comply with Spotify’s earnest request to immediately delete all inadvertently disclosed sensitive data. > “We have conducted an internal investigation and have contacted all of our business partners that may have had access to your account information to ensure that any personal information that may have been inadvertently disclosed to them has been deleted.” ## How secure is Spotify? Spotify operates a digital music streaming service that provides on-demand access to millions of songs, podcasts, and audio content. The platform offers both ad-supported free tiers and paid subscription options for users across multiple devices. * View our free preliminary report on Spotify’s security posture * 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities [View Spotify's score](/security-report/spotify) [View score](/security-report/spotify) [https://www.spotify.com](/security-report/spotify) ### Sign up for our newsletter UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights. ## Latest news Stay up-to-date with the latest news in cybersecurity. [](/news/hugging-face-data-breach-2026-07-20) #### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20) A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 20, 2026 [](/news/ey-data-breach-2026-07-19) #### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19) A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) #### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16) A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/park-west-psychology-data-breach-2026-07-16) #### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16) A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 15, 2026 [](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) #### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16) A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [](#) July 14, 2026 [](/news/npcil-data-breach-2026-07-16) #### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16) A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures. ##### [UpGuard Team](/team/upguard) July 14, 2026 [View all news](/news) ## Protect your organization Get in touch or book a free demo. [Contact sales](/demo) [Free demo](/demo) ##### Free instant security score ## How secure is your organization? Request a free cybersecurity report to discover key risks on your website, email, network, and brand. * Instant insights you can act on immediately * Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities [Free score](/instant-security-score)