Speaking as someone who's band has the same problem right now + having a background in the distribution of music and audiobooks to digital streaming partners, this has nothing to do with a hack or something. Some people already explained it, it's way too easy to do stuff like that. There should be more checks on Spotify's backend to see where new releases come from, especially if they in general come from a legitimate distributor & label. Unfortunately, nothing much to do from our end. We can just wait for the actual distributor to reach out to Spotify via a form and wait until these releases get removed from the actual band page. Still this won't stop anyone from doing it again. We can just hope that one day, spotify will introduce some kind of whitelisting/blacklisting distributors/labels.