It looks like Spotify recently suffered a security breach. A list containing hundreds of sets of account credentials was published late last week to popular anonymous text file sharing site Pastebin, and several of the accounts have been confirmed to be real. What’s more, users named in the leak are already reporting that their accounts were indeed breached.

In other words, change your Spotify password immediately.

The news comes from TechCrunch, which says it has directly confirmed that a number of accounts mentioned in the leaked document were indeed breached. The tech site contacted several email addresses contained within the leaked file, and it confirmed that a number of people who replied had indeed had their accounts compromised.

UPDATE: As of 10:30AM PST Spotify is denying it was hacked

To be safe, I just changed my Spotify password. Here’s how to change yours.