Spotify Music Library Hacked News: A group of pirate activists said that it had gained access to a huge list of music for Spotify and was ready to distribute much of the company’s catalogue, along with extensive data, possibly spanning millions of audio files. The allegation originally appeared on Anna’s Archive, an open-source research and preservation website most famous for sharing books and academic papers. If true, it would be one of the biggest reported data exfils ever from a music streaming service.
Spotify has also conceded that it was scraping in an illegal manner and claimed to have already taken steps. Yet the scale of what’s being claimed has raised significant questions about music piracy, digital preservation and how safe large streaming services truly are.
ALSO READ: Samsung Reportedly In Talks To Manufacture AI Chips For Elon Musk’s xAI
What the group says it has obtained
The group used a script to scrape Spotify “at scale” and organised what they refer to as the first fully open music preservation archive in the world, according to their post on Anna’s Archive. The dataset reportedly includes:
- About 256 million track metadata rows
- Up to 86 million audio files
- Close to 300TB of total data
- Release coverage through July 2025
The archive is said to be approximately 99.6 per cent of all listens on Spotify, approved for release using the popularity metrics that the platform itself employs. Only metadata had been publicly disclosed as of Dec. 21. The audio files, the group says, will be gradually released, beginning with the most popular tracks.
Reportedly almost all of the audio is still stored in Spotify’s native OGG Vorbis format at a bitrate of 160 kbps for popular tracks, after which point everything else seems to be re-encoded at lower bitrates.
Why Anna’s Archive says it did this
The group is presenting it as cultural preservation, not piracy. Anna’s Archive objects that current music databases are either focused on mainstream artists, rely on space-consuming formats, or don’t have a single universal database of recorded music.
For scale comparison, MusicBrainz, which is one of the biggest open music databases today, has about five million unique tracks. Anna’s Archive boasts its dataset contains 186 million unique ISRCs and that it is by far the largest music metadata collection ever curated.
The question of whether that justification is legally sound is a different issue altogether.
Spotify’s response and what it says users ought to know
Spotify has acknowledged that it has detected and disabled accounts that use unauthorised data scraping. “We’ve added additional safeguards and will continue to work with law enforcement as they investigate,” the company said in a statement.
Spotify also said in the statement that an internal investigation determined a third party had scraped public metadata and employed unauthorised means, including bypassing DRM protections, to access some audio files. The investigation is still ongoing.
User-wise, there is no evidence at this time that any user accounts were accessed or that any personal account information — such as passwords, email addresses and similar items — was accessed. It seems that the issue has to do with large-scale scraping of Spotify’s catalogue rather than a leak of user information.
ALSO READ: How To Clear Browser History On Chrome, Firefox, Edge, Safari, And Opera
Why this matters beyond Spotify
This is indicative of a war playing out in the digital age. On the other are walled garden streaming services driven by licensing, DRM and locked access. On the other are preservationist organisations promoting an idea that culture, musical culture included, should not go behind corporate paygates.
As Yoav Zimmerman, chief executive and co-founder of Third Chair, described it, anyone with some storage space and a personal media server could technically set up his or her own private, free version of Spotify that spanned decades of music. Copyright law and enforcement are the real roadblocks, he argues, not technology.
Whether or not Anna’s Archive decides to make audio files available, we’ll see. Even at the level of metadata, however, the claim speaks to how tenuous control over vast digital libraries can become once data becomes widely available en masse.
For now, Spotify is resisting. The larger debate about preservation, piracy and who really owns digital culture is also far from settled.
