Spotify Metadata Scrape Raises Fresh Security Concerns

Spotify is facing fresh scrutiny after reports claimed that a pirate activist group scraped and released a massive chunk of its music metadata. The revelation surfaced through a blog post published by Anna’s Archive, an open-source search platform known for archiving books and research material.

According to the report, the group accessed metadata covering hundreds of millions of Spotify tracks. However, the music streaming platform says it is actively investigating the incident and has already identified unauthorized activity.

What Does the Scrape Allegedly Includes

Anna’s Archive claims the scrape contains around 256 million rows of track metadata. The post also mentions access to nearly 86 million audio files. Still, the report clarifies that the group has released only metadata so far.

The group plans to distribute the data through peer-to-peer networks using bulk torrents. Reports estimate the total size at nearly 300 terabytes. As of December 21, no Spotify music files were publicly available.

Company Confirms Unauthorized Access

Spotify has acknowledged the incident. In a statement shared with Billboard, a company spokesperson said an investigation revealed that a third party scraped public metadata.

The statement added that illicit methods were used to bypass digital rights management systems. This allowed limited access to some audio files. Spotify emphasized that the investigation is ongoing.

Why Is This Drawing Attention

The report triggered strong reactions across the tech and media space. One widely shared LinkedIn post suggested the data could allow users to recreate a private music streaming setup using personal servers.

While Spotify hosts far more tracks than the leaked figures suggest, the scale still stands out. The reported dataset could surpass existing open music databases like MusicBrainz, which lists around five million tracks.

Preservation Claim Adds Another Layer

Anna’s Archive described the project as an effort to preserve cultural and musical history. The group said Spotify’s catalog offers a strong foundation for building a long-term music archive.

The post also noted that Spotify does not represent all global music. Still, it argued the platform provides a meaningful starting point for preservation efforts.

What Happens Next for Spotify

Spotify continues to investigate how the scraping occurred and what data was exposed. For now, there is no indication of a user data breach.

The incident highlights ongoing tensions between digital preservation, copyright law, and platform security. More details are expected as Spotify’s investigation progresses.