March 4, 2009 7:06 PM PST

Spotify's latest music dirge: We've been hacked

by Charles Cooper
  • Font size
  • Print
  • 3 comments

Hackers were able to penetrate Spotify's computer network, potentially exposing the personal information and passwords of some of the music service's users.

In a company blog announcement, Spotify did not get specific about the extent of the breach. Here's part of the post:

Along with passwords, registration information such as your email address, birth date, gender, postal code and billing receipt details were potentially exposed. Credit card numbers are not stored by us and were not at risk. All payment data is handled by a secure 3rd party provider.

If you have an account that was created on or before December 19, 2008, we strongly suggest that you change your password and strongly encourage you to change your passwords for any other services where you use the same password.

The company, based in Europe, was not immediately available for comment so it was unclear how many of its users were affected or to what extent. But in an article published by Britain's Guardian, the newspaper's technology correspondent reported that "thousands of users' personal details may have been stolen by hackers."

Charles Cooper has covered technology and business for more than 25 years. Before joining CNET News, he worked at the Associated Press, Computer & Software News, Computer Shopper, PC Week, and ZDNet. E-mail Charlie.
Recent posts from Coop's Corner
It's Coop's -30- column: Adios, sorta
To catch a (cyber) thief: It's not easy
I'm officially dropping out of the Twitter gab fest
Telcos said testing plan to offer PCs to businesses
The world is flat. So what's our problem?
First GM, now Silicon Graphics. Lessons learned?
LotusLive Engage: IBM's cloud gets social
LongJump to foster private clouds for corporate IT
Add a Comment (Log in or register) (3 Comments)
  • prev
  • 1
  • next
by 3rdalbum March 5, 2009 3:35 AM PST
Amateur Hour on the Internet: Websites storing user passwords in a database, rather than hashed passwords.

This is what happens when they employ "web designers" rather than "web developers".
Reply to this comment
by inachu March 5, 2009 6:58 AM PST
Having accounts at all for a service like this is just to spread around liability.
by inachu March 5, 2009 6:51 AM PST
I still wonder why we need an account to log into this free music streaming service.
So far the only plan is to be hacked for user names when really no user names are needed.
User names are used only for complicity with music industry if spotify lost in court and must hand over user names so the users must pay for listening to music for free. Get rid of account names and end users will not be held liable. Why must you make the home user complicit in this scheme?

Better just to have a free program like winamp that does the same thing only better.
Having people needing log in accounts makes others share in your misery.
Reply to this comment
(3 Comments)
  • prev
  • 1
  • next
advertisement

15 sites that went kaput in 2009

Web sites launch all the time, but they also shut their doors. We highlight 15 that bit the dust this year.

Top 10 news stories of the decade

Let the debate begin: Was the iPhone more important than iTunes? Was anything bigger than Google finding a great business model? CNET offers its list of the 10 most important stories of the '00s.

About Coop's Corner

Charles Cooper has covered technology and business for more than 25 years. A graduate of Queens College and Columbia University, Cooper received the Excellence in Journalism award from the Northern California branch of the Society for Professional Journalists for column writing.

Add this feed to your online news reader

Coop's Corner topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right