If you’ve discovered that Spotify has reset the password for your account, it could be that you’re part of a “rolling password reset” necessitated by the discovery of a possible security isssue.
A report earlier this week found that the Spotify credentials of 350,000 people were found on a publicly accessible database. It’s not that Spotify was hacked, though. It appears that this third party created the database using a variety of sketchy sources for possible future hijacking of these accounts.
The database had reached 72 GB and contained nearly 400 million records.
Spotify started with the password resets back in July when they became aware of the potential breach. It’s only this past week that the situation was made public.
Read more here.