These files are rarely from a direct Spotify breach. Instead, they are typically compiled through credential stuffing . Attackers take passwords leaked from other websites and use automated scripts to see if they work on Spotify.
In the context of account cracking, "stranded" usually refers to accounts where the primary "Family Plan Manager" is no longer active, or the account is in a state where it can be easily hijacked by unauthorized users without the original owner noticing quickly. Security Context 50x Spotify Family - Stranded.txt
Such lists are frequently shared or sold on "dark web" forums or Telegram channels. Buyers use them to "freeload" on someone else's premium subscription. Impact on Users: These files are rarely from a direct Spotify breach