Customer Relationship Management News NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
This ad will display for the next 20 seconds. Click for more information, or
Home CRM Systems Customer Service Contact Centers Business Intelligence More Topics...
Advertisement
Free Gartner Report:
Drive innovation & collaboration
with the "Everyone's IT" approach.

View the research report
Network Security
Gartner's #1 for endpoint backup
Average Rating:
Rate this article:  
Spotify Hacked, Just One User Targeted

Spotify Hacked, Just One User Targeted
By Jennifer LeClaire

Share
Share on Facebook Share on Twitter Share on Linkedin Share on Google Plus

Given that Spotify claims that only one user’s data has been compromised, this was probably achieved via a re-usable, broadly applicable attack method perhaps affecting older versions of the Spotify app. Users, particularly on the Android platform, should follow Spotify’s recommendation and ensure they are running up-to-date software.
 

The online world is still reeling from the eBay breach, but Spotify is now pushing the online auctioneer deeper into tech news pages as it reports a hack of its own.

The music streaming service on Tuesday revealed “unauthorized access” to its systems and internal company data. Spotify CTO Oskar Stal said the company has launched an investigation into the breach.

“Our evidence shows that only one Spotify user’s data has been accessed and this did not include any password, financial or payment information,” he wrote in a blog post. “We have contacted this one individual. Based on our findings, we are not aware of any increased risk to users as a result of this incident.”

Downplaying the Breach

Armed with this information, Stal said the company is asking “certain Spotify users” to re-enter their usernames and passwords to log in as a general precaution. Spotify is also planning to push out an Android app upgrade over the next few days.

“Please note that offline playlists will have to be re-downloaded in the new version. We apologize for any inconvenience this causes, but hope you understand that this is a necessary precaution to safeguard the quality of our service and protect our users,” Stal said. "We have taken steps to strengthen our security systems in general and help protect you and your data -- and we will continue to do so. We will be taking further actions in the coming days to increase security for our users.”

Guess What Happened

We caught up with Craig Young, a security researcher at security firm Tripwire, to get his take on the latest in a string of breaches. He shared with us two guesses about what happened at Spotify.

“My guess is that they maybe didn’t validate SSL certificates,” Young said. “My guess would be that someone demonstrated a proof-of-concept attack for the Spotify team and that constitutes the single known affected user.”

We also asked Dwayne Melancon, CTO at Tripwire, for his thoughts on the so-called unauthorized access. He told us the breach would not warrant an all-user notification if it had been as simple as one user oversharing his login credentials.

“Given that Spotify claims that only one user’s data has been compromised, I suspect this was achieved via a re-usable, broadly applicable attack method perhaps affecting older versions of the Spotify app,” Melancon said. “Users, particularly on the Android platform, should follow Spotify’s recommendation and ensure they are running up-to-date software.” (continued...)

1  |  2  |  Next Page >

 

Tell Us What You Think
Comment:

Name:



UCS Invicta: Integrated Flash Why wait for the future? Unlock the potential of your applications and create new business opportunities today with UCS Invicta Series Solid State Systems. Take advantage of the power of flash technology. See how it can help accelerate IT, eliminate data center bottlenecks, and deliver the peak application performance and predictability your users demand. Click here to learn more.


 Network Security
1.   Gmail Hackable by Android Apps
2.   UPS Stores Hit by Data Breach
3.   Target Data Breach Cost: $148 Million
4.   Aruba Handles Black Hat with Aplomb
5.   Chinese Hackers Steal Patient Data


advertisement
UPS Stores Hit by Data Breach
Biz must adopt better security measures.
Average Rating:
Target Data Breach Cost: $148 Million
Better customer data protection needed.
Average Rating:
FBI Cybersquad To Add Agents
Rewarded for recent security successes.
Average Rating:
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
Researchers Find Malicious Android Apps Can Hack Gmail
A new study shows that a weakness in the Android mobile operating system can be used to steal sensitive, personal info from unwitting users. Gmail proved to be the easiest app to attack; Amazon, the hardest.
 
UPS Stores in 24 States Hit by Data Breach
Big Brown has been breached. UPS said that about 105,000 customer transactions at 51 of its UPS Store locations in 24 states could have been compromised between January and August.
 
Cost of Target Data Breach: $148 Million Plus Loss of Trust
The now infamous Target data breach is still costing the company -- and its shareholders -- plenty. In fact, the retailing giant forecast the December 2013 incident cost shareholders $148 million.
 

Enterprise Hardware Spotlight
Acer's New Desktop Box Rides the Chrome OS Wave
Filling out its Chrome OS line, Acer is following the introduction of a larger Chromebook line earlier this month with a new tiny $180 desktop Chromebox and also a smaller Chromebook.
 
Feds OK $2.3 Billion IBM-Lenovo x86 Server Deal
IBM and Lenovo are celebrating U.S. approval of their x86-based server deal, having cleared some major security hurdles. The deal makes Lenovo a major player for enterprise data centers.
 
Three New Lenovo PCs Aimed at Business Users
With businesses wanting computing solutions that do more for less money, Lenovo has unveiled three new desktop PCs that it says offer solid computing at a budget-minded price.
 

Mobile Technology Spotlight
Screen Shortage Briefly Puts Brakes on iPhone 6
RAM? Check. Antenna switch? Check. Screen? Oops. Parts suppliers for Apple have found themselves facing a shortage of screens for the new iPhone 6 as next month's release date for the new smartphone looms.
 
Bounty Offered to Coders for Oculus Rift Bugs
Coders who find bugs in software for the Oculus Rift VR immersive headset could receive a reward of at least $500 under Facebook's White Hat bounty program. Facebook acquired Oculus in March.
 
Google Glass Adds Voice Access to Phone Contacts
The latest update to Google Glass will let users access their top 20 phone contacts with voice commands alone. A user can then choose a phone call, Google hangouts, e-mail or text messaging.
 

Navigation
CRM Daily
Home/Top News | CRM Systems | Customer Service | Contact Centers | Business Intelligence | Sales & Marketing | Customer Data | CRM Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.