norm: spotify usaUSLEI 2138008WM218QBKRII94 · no CIKMax severity: Low

Canonical registry

SPOTIFY USA INC.

ent_019ed7ef33935a3d4c6be3cd57e6bde1

Compliance scorecard →🔔 Follow entity

Disclosures

1

State AG · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

0

none in sample

Identity resolution

Canonical name: SPOTIFY USA INC.
Normalized: spotify usa— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: 2138008WM218QBKRII94
SEC EDGAR CIK: None — not an SEC registrant
Domain: spotify.com

Disclosure history (1)newest first

🐻California State AGas victim2020-12-09
Spotify USA Inc. disclosed a data breach where a system vulnerability exposed user registration information (email, password, gender, DOB) to business partners. The vulnerability existed from April 9, 2020, to November 12, 2020. Spotify reset passwords and contacted partners to delete data. No unauthorized use was detected.