Streaming Industry Risk: 171 Spotify Accounts Leaked in 2015

HEROIC analysts identified a second, separate database breach tied to Spotify, also dated September 12, 2015. This incident is larger than other Spotify-linked leaks in the same period, exposing 171 accounts, with email addresses paired directly with plaintext passwords.

Why This Is Dangerous

Streaming services are part of a broader digital media industry where accounts are often treated as disposable, but the passwords protecting them frequently are not unique. With plaintext passwords exposed here, an attacker has an immediate, working login for every one of these 171 accounts, no cracking required.

What Was Exposed

• Email addresses
• Plaintext passwords

Why This Matters

Across the streaming and entertainment industry, credential stuffing remains one of the most common ways accounts get taken over, precisely because so many people reuse the same password for a music app that they use for email or banking. An attacker with this list can test each email and password pair against dozens of other services automatically, and any match becomes a foothold into something far more valuable than a playlist.

How Database Breaches Like This Happen

This incident is classified as a database breach: a set of account records was accessed directly from a backend system. Because this is one of several distinct Spotify-linked leaks tracked from the same period, it illustrates how breach data in the streaming industry tends to surface in scattered batches rather than one single, complete dump.

Check If You Are Affected

If you use Spotify, or reused a password from around 2015 on any other account, checking your exposure takes only seconds. HEROIC's free breach scanner searches a database of more than 400 billion breached records to tell you instantly if your email address has been compromised.