Spotify has started resetting passwords of up to 3,50,000 accounts that suffered a credential stuffing attack. The breach was discovered by vpnMentor that found an exposed database of 380 million records belonging to a third-party. "The hackers were possibly using login credentials stolen from another platform, app, or website and using them to access Spotify accounts," vpnMentor's report said.