Hacktivist group Anna's Archive has claimed responsibility for a significant data breach at Spotify, involving 86 million audio files and over 250 million metadata units, totaling approximately 300 terabytes. The group announced the breach on 2025-12-22, describing it as the 'world's first music preservation archive.'
Details of the Breach
Anna's Archive has already published the metadata on their torrent site and plans to release the audio files based on Spotify's popularity metrics. The most popular tracks will be available at a bitrate of 160 Kbps, while less popular ones will be at 75 Kbps. The group aims to preserve music without bias towards popular artists or high-quality files.
Spotify's Response
Spotify has confirmed the unauthorized access and is conducting an investigation. The company stated that a third party collected publicly available metadata and used illegal methods to bypass DRM protections to access some audio files. Spotify is working to address the breach and secure its platform.
