A new cybersecurity “breach” has revealed the personal information of various celebrities, and while it won’t let you steal their identities, it will allow you to… judge them. The “Panama Playlists” details the Spotify song choices of notable people ranging from Vice President JD Vance to talk show host Seth Meyers to tech bros like Palmer Luckey. And technically, it wasn’t a breach at all, but a possible lack of understanding around Spotify’s privacy settings.
Spotify has always allowed users to make playlists public or private and some even actively seek followers. On top of that, each playlist cover shows “Public Playlist” or “Private Playlist” right up top. However, the default for new playlists is “Public,” so many users may not be aware that they’re listening habits are available for the world to see — if someone looks hard enough.
That’s exactly what the unknown creator of the Panama Playlists did: simply search for famous people and find their public playlists. The results aren’t really that interesting? Sure, it’s kind of funny that JD Vance has I Want It That Way on his “Making Dinner” playlist, ironic that White House press secretary Karoline Leavitt’s playlist features Aretha Franklin’s Respect, and very on-the-nose that US AG Pam Bondi has Cold As Ice on her playlist.
Other standouts are Young Dumb, Broke by Khalid on Sam Bankman-Fried’s “loud” playlist, James Blake’s Retrograde on Pete Buttigieg’s “Election Eve” playlist and Billions and Billions on venture capitalist Mark Andreesen’s “Focus Alpha” list. In other words, everything is about as you’d expect given the personalities (most of whom aren’t exactly in the A-list tier). As The Verge noted, one list was attributed to Kara Swisher, but she said it was inaccurate so it was removed.
While a relative trifle compared to other data leaks, Panama Playlists does show Spotify’s loose behavior around user privacy. For one thing, it makes all your playlists public by default. If you switch that to private in the settings, it will only affect playlists created afterwards. You then need to set each one to private individually. Playlists, followers and following also appear on your profile by default. With that in mind, think of Spotify as not just a streaming but a social media platform, and treat your privacy accordingly.