Spotify executed a massive rolling force-reset of user passwords after security analysts uncovered a cloud-hosted database containing active user credentials harvested via automated credential stuffing scripts. The data included user names, email indices, and regional profiles.