(There's no evidence that the Spotify accounts that get taken over are anything but people either using known weak passwords for their Spotify accounts - which are easily tested/guessed, or reusing email/password combos that were leaked elsewhere already.)
Yes, I wasn't necessarily saying that it was hacked and data stolen. More that there is clearly something up with it whether it be passwords being compromised or it not being set up to detect likely indicators that an account's been compromised, is in the process of being compromised.
https://www.troyhunt.com/no-spotify-wasnt-hacked/
(There's no evidence that the Spotify accounts that get taken over are anything but people either using known weak passwords for their Spotify accounts - which are easily tested/guessed, or reusing email/password combos that were leaked elsewhere already.)