Original sentence: Spotify later announced that any affected users have been personally emailed by Spotify The team creating "Despotify", an open source clone of Spotify, later announced that it was they who had discovered the security hole, and that only around 40 users' details had been revealed, mostly members of the Despotify or Spotify teams.While it is possible that other groups could have used this approach to gain user information, it is unlikely given that Spotify fixed the issue within a few hours of the exploit being made public
Edited sentence: Spotify later announced that any affected users have been personally emailed by Spotify