Anonymous Perpetrators Scraping 86 Million Spotify Files Face $322 Million Judgment in

The judgment was handed down by U.S. District Judge Jed S. Rakoff in the Southern District of New York after the operators of Anna’s Archive failed to appear for a default hearing, according to Tom’s Hardware. Rakoff awarded Spotify and the three major record labels a total of $322 million, but the breakdown is striking: only $22.2 million stems from traditional copyright infringement, while the remaining $300 million was granted under the Digital Millennium Copyright Act’s (DMCA) anti‑circumvention provisions. The DMCA claim does not require the plaintiff to own the underlying works; it merely penalizes the act of bypassing technological protection measures, a legal lever that the court applied to every one of the 86 million tracks scraped from Spotify’s catalog.

The anti‑circumvention component translates to a statutory damage award of $2,500 per file, a figure that the court applied uniformly across the entire dataset. This per‑track calculation establishes a template that could be invoked against any platform from which content is harvested behind authentication barriers. As Tom’s Hardware notes, the precedent is “applicable to any platform scraped from behind authentication,” meaning that services ranging from video‑on‑demand providers to image repositories could face similarly massive exposure if their access controls are subverted and the resulting files are distributed without permission.

From a technical perspective, the Anna’s Archive operation involved a large‑scale scrape of Spotify’s streaming library, followed by an intention to seed the files via BitTorrent. The December announcement of the scrape triggered a lawsuit in January, filed jointly by Spotify, Universal Music Group, Sony Music Entertainment, and Warner Music Group. The plaintiffs alleged that the archive’s operators employed automated tools to bypass Spotify’s DRM (Digital Rights Management) and authentication mechanisms, then harvested the audio files in bulk. By distributing the files through a peer‑to‑peer network, the perpetrators would have effectively created a parallel, unlicensed distribution channel that undermined the licensing model underpinning the music industry.

Legal scholars have long debated the scope of the DMCA’s anti‑circumvention clause, particularly when applied to mass‑scale data extraction. The $300 million award underscores the court’s willingness to treat systematic circumvention as a distinct wrongdoing, separate from the infringement of the underlying copyrighted works. In practice, the judgment sends a clear signal to developers of scraping tools and to operators of “open‑access” archives: the mere act of defeating a platform’s technical safeguards can trigger statutory damages that dwarf traditional infringement awards.

The financial impact on Anna’s Archive is largely symbolic, given that the site’s operators remain anonymous and the assets to satisfy a $322 million judgment are unclear. However, the case sets a legal benchmark that could influence how future AI training datasets are assembled. If a model developer were to harvest copyrighted audio, video, or text by bypassing access controls, the per‑file damages outlined by Rakoff could be invoked, potentially inflating the cost of assembling large training corpora to prohibitive levels. As the industry grapples with the tension between open data and intellectual‑property rights, the Spotify judgment provides a concrete, enforceable metric for the risk of anti‑circumvention liability.