Last Monday, I got an email from Spotify saying that somebody in Brazil had logged into my account. I checked. Sure enough: A stranger was using my Spotify to listen to Michael Jackson. I told Spotify to “sign me out everywhere” — but I didn't change my password. On Wednesday, it happened again.