24 December, 2025
spotify-faces-major-data-breach-300-terabytes-of-music-scraped

Spotify is grappling with a significant crisis following reports that a pirate activist group has allegedly scraped a substantial portion of the streaming giant’s music library. The data, reportedly shared online, includes over 86 million audio files and 256 million rows of track metadata, totaling a staggering 300 terabytes. This revelation has sparked alarm across the music industry, as the group claims its intent is “music preservation,” though critics argue it could enable the creation of offline, DIY versions of Spotify.

According to Anna’s Archive, the group responsible for the scrape, only metadata has been publicly released as of Sunday, December 21. However, they assert that they have developed a method to scrape Spotify “at scale,” framing the project as part of a larger mission to archive and preserve cultural material. Spotify has confirmed that it is investigating the incident, with a spokesperson stating, “An investigation into unauthorized access identified that a third party scraped public metadata and used illicit tactics to circumvent DRM to access some of the platform’s audio files. We are actively investigating and mitigating the incident.”

Industry Reactions and Concerns

Not everyone is convinced by the “just preservation” narrative. Yoav Simmerman, CEO and co-founder of media-tech startup Third Chair, described the situation as “insane.” He warned that with sufficient storage and a personal streaming server like Plex, someone could theoretically reconstruct a personal, free version of Spotify, including music up to 2025. “There is no putting this back in Pandora’s box,” Simmerman added.

To put the scale into perspective, the scrape is reportedly 37 times larger than MusicBrainz, one of the biggest open-source music archives, which hosts around five million unique tracks.

Anna’s Archive, typically focused on books and academic papers, acknowledged that music isn’t usually its domain. However, the group argues that preserving recorded music aligns with its broader goal of safeguarding “humanity’s knowledge and culture.” They concede that Spotify does not encompass all music but describe it as “a great start.”

Legal and Ethical Implications

The incident raises numerous legal and ethical questions. The potential for individuals to create unauthorized copies of Spotify’s library could undermine the platform’s business model and violate copyright laws. This development comes amidst ongoing debates about digital rights management and the balance between preservation and piracy.

Moreover, the breach could affect artists who have recently pulled their music from Spotify, protesting CEO Daniel Ek’s investments in AI military technology. Whether their tracks were included in the scrape remains unclear, adding another layer of complexity to the unfolding situation.

The Road Ahead

As Spotify continues its investigation, the music industry watches closely. The implications of this data breach could be far-reaching, potentially prompting changes in how streaming services protect their libraries. Meanwhile, the debate over digital preservation versus piracy is likely to intensify.

For now, the full impact of this massive data scrape remains to be seen. The incident underscores the vulnerabilities inherent in digital platforms and the ongoing challenges in balancing access to cultural materials with the protection of intellectual property.

Further Reading:

  • King Gizzard & The Lizard Wizard Have Officially Bailed From Spotify
  • So An AI “Artist” Just Landed a US $3 Million Record Deal