Feeds

BREACH! Spotify flings new app at all Android users

After one user account compromised, music company pours bleach everywhere

The essential guide to IT transformation

Spotify will ask all Android users of its streaming service to download a new version of its app after its internal systems were compromised.

The European music company disclosed the breach in a blog post on Tuesday. No password, financial, or payment information appears to have been accessed, and it only affected one user.

"We take these matters very seriously and as a general precaution will be asking certain Spotify users to re-enter their username and password to log in over the coming days," explained Spotify's chief technology officer, Oskar Stal, in a blog post. "As an extra safety step, we are going to guide Android app users to upgrade over the next few days."

Though the breach was of a small scale, Spotify reacted quickly.

"As soon as we were aware of this issue we immediately launched an investigation. Information security and data protection are of great importance to us at Spotify," the company explained in a more detailed FAQ on the breach.

"Our evidence shows that only one Spotify user's data has been accessed and this did not include any password, financial or payment information. We have reached out to this one individual. Based on our findings, we are not aware of any increased risk to users as a result of this incident."

Given the tendency for breaches to quickly cascade into severe hacks, the company has chosen to react swiftly to try and quash any hacking attempts, we reckon.

"We do not believe this incident will affect your phone in any way. However, as an extra safety step, we are going to guide Android app users to upgrade over the next few days," the company wrote.

However, users will lose all their offline playlists when they download the new app, so will have to re-download the songs to their phone. "We apologize for any inconvenience this causes, but hope you understand this is a necessary precaution to safeguard the quality of our service and protect our users." ®

Next gen security for virtualised datacentres

More from The Register

next story
Rupert Murdoch says Google is worse than the NSA
Mr Burns vs. The Chocolate Factory, round three!
e-Borders fiasco: Brits stung for £224m after US IT giant sues UK govt
Defeat to Raytheon branded 'catastrophic result'
Germany 'accidentally' snooped on John Kerry and Hillary Clinton
Dragnet surveillance picks up EVERYTHING, USA, m'kay?
Snowden on NSA's MonsterMind TERROR: It may trigger cyberwar
Plus: Syria's internet going down? That was a US cock-up
Who needs hackers? 'Password1' opens a third of all biz doors
GPU-powered pen test yields more bad news about defences and passwords
Think crypto hides you from spooks on Facebook? THINK AGAIN
Traffic fingerprints reveal all, say boffins
Microsoft cries UNINSTALL in the wake of Blue Screens of Death™
Cache crash causes contained choloric calamity
prev story

Whitepapers

5 things you didn’t know about cloud backup
IT departments are embracing cloud backup, but there’s a lot you need to know before choosing a service provider. Learn all the critical things you need to know.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.
Rethinking backup and recovery in the modern data center
Combining intelligence, operational analytics, and automation to enable efficient, data-driven IT organizations using the HP ABR approach.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.