WorkSeptember 17, 2026via 404 Media
I Hijacked a Real Artist's Spotify with AI Music. It Was Disturbingly Easy
Why it matters
AI-generated music is flooding legitimate artist accounts through platform vulnerabilities, raising urgent questions about artist protection, music industry liability, and the ease with which AI can impersonate human creators at scale.
Key signals
- Demonstrated account takeover vulnerability on Spotify using AI-generated music
- Attack exploits weak artist identity verification in digital music distribution
- Real artist's account compromised to host AI content
- Raises questions about platform security and artist impersonation at scale
- Music industry/creator economics directly threatened by AI injection into legitimate channels
- Spotify distribution loophole allows AI music to be attributed to real artists
- Attack was reproducible and 'disturbingly easy' to execute
- Highlights platform enforcement gap in music metadata and artist verification
- Relevant to musicians, rights holders, and AI music platform builders
- Published Sep 17, 2026
The hook
A researcher hijacked a real artist's Spotify with AI music in minutes. The loophole: Spotify's identity verification is broken.
A glaring loophole in digital music distribution makes it very easy to piggyback on the talent of real artists with AI generated music.