> To protect your Spotify account, we've reset your password due to detected suspicious activity.
Haven’t used it recently or logged in to any new device. Leads me to suspect a data breach.
My spotify account was hijacked in 2017 and managed to get it back - someone from Tunisia - he had the audacity to start creating playlists full of autotune rappers. I wouldn't mind sharing but man his taste in music was awful.
The only ways I can imagine someone would get that email address are:
A) From Spotify (i.e. breach)
B) From Google (as I linked my Spotify account to Google Home, which presumably shares the registered email address)
C) From some poor security practice on my part (e.g. maybe I entered the email address on a phishing site, or have malware on one of my devices, or someone has access to my email, ...)
D) Guessing it.
I had presumed C or D, but given the timing of your post, I'm now not so sure...
https://www.businessinsider.de/spotify-users-password-reset-... "Spotify's security team identified that some of the leaked user credentials might correspond to Spotify accounts"