Spotify account hacked - could do with some help to find out why

[TheEntertainerr]

I was listening to Spotify premium though the app on my laptop and was logged out. I was engrossed in my work so I didn't pay too much attention when the music stopped.

Anyway I tried to log in using email address and I got a message to say that the email address isn't linked to any accounts. So I tried username but password incorrect. I then saw an email from Spotify to say the email address on my account has been changed to XXXX. I can't recover my account and the option is to email the account for changes to let them know that this wasn't me.

I'm on a free trial of premium, so not very familiar (haven't used it in years and only signed up to get offline access for a one off occasion use). Is it possible to rack up lots of charges on Spotify? My account will be billed to my mobile.

How can I find out how my account was hacked? I'm more concerned that my laptop or other device has been hacked. I've checked the antivirus programme and everthing appears fine.

The email address is linked to a facebook account and it has a phone number. It's also linked to Instagram. So WIBU to keep ringing the number to piss him off? WIBU to post his details here so any mumsnetters who want to join in can? Just imaging this has cheered me up.

I've already been looking at this for a couple of hours so I'm going to head off to bed. I'll check in tomorrow morning.

Just received text and email from spotify. Account has been suspended because of suspicious activity. They will reactivate when I provide some security details.

I had the same thing happen, Spotify were very good at sorting it out, luckily I hadn't deleted the confirmation e-mail when I set up premium.

But it's weird, I don't think they get anything apart from access to your account to play music so a lot of effort for not much - unless they can try the password on other sites with more information?

So I would love to hear theories of why

Be careful about providing the security details. That is potentially the point of the hack in the first place.

YES ^

Listen to Eponymous

They're not interested in having access to your Spotify account. They're trying to get you to answer further questions that can then be used to hack far more important accounts. I very much doubt that the email was sent by Spotify.

You can put your email address in here:

sec.hpi.de/ilc/search?lang=en

And you'll see a few details about what information has been accessible from accounts registered using that address.

Best to change any passwords on any accounts using that address.

Someone was using my Spotify, but they didn't bother changing the email address or anything, just ensured somehow that every single recommendation I will ever receive from now to the end of time will be for Turkish rap music, even though they only used it for about 2 days.