Konstantinos K.

Spotify account got hacked from a place far away (im in Oxford, attack was from Instabul, dont know anyone remotely from there, treated as an anon cyberattack).

Customer service did nothing but sweetalking me into dissapointment, while all I was asking during my panic is to send me over the IPs that my own account has logged in to figure out where the attack was from (at this point I didnt know who was attacking from where).

Spotify delayed af and as a result the attacker logged in my profile page the next and got ahold of my gmail/card details and tried to invade both gmail/online banking account. Thankfully there are some proper companies out there that know what 2-step verification is and informed me about the attack AS WELL AS providing the location of the attack (then I learned it was from Instabul).

Had Spotify bothered to protect their customer RATHER THAN THE ATTACKER (customer service guy actually told me to contact the law enforcement to get that info, lol really? I though IP logins in MY ACCOUNT are my own property anyways regardless of which device logged in), I would know one day earlier that this is not a friend trolling but a legitimate cyberattack, allowing to move quicker in locking everything else.

Had Spotify bother to listen to their community maybe this attack would've never been achieved. This is what you believe as of last August

(2017-08-29

*******@ThomasVH we've revisited this idea with the teams behind logging into Spotify. We've decided not to move forward with two-factor authentication at this time.

If you're interested in security, we do have some tips to protect your Spotify account here. Of course if our status on this changes we will let you all know right here. Thanks!)

Before you prompt me into a survey on why I will be permanently ending my subscription once I set up my library properly on another service, the post above pretty much sums it up.

Thanks