Spotify passwords stored on the cloud without password

Hackers who stole 350,000 Spotify passwords stored them on a cloud server without a password. The hackers access the passwords using a cache of login credentials stolen from other data breaches, as all of the the users who had their Spotify passwords stolen were reusing the same password acorss multiple accounts- the biggest error of password security.

The hackers who stole the passwords then fell vicitms to a similar security faux pas, as they saved the passwords on an unsecure cloud database. This meant that anyone with a web browser was able to see the data base without needing a password to access it.