Suno breach exposes 55M users' data, source code
This digest was compiled by AI from multiple sources — links to the originals are below.
A hacker stole personal information of more than 55.3 million Suno users in a November 2025 breach, according to Have I Been Pwned. The stolen data includes names, addresses, phone numbers, and partial payment card numbers. Suno has not yet disclosed the incident or notified affected individuals.
The Breach
The cyberattack on AI music generator Suno occurred in November 2025 but was only recently revealed by 404 Media. Have I Been Pwned obtained a copy of the breached dataset, confirming over 55.3 million users affected. Stolen information includes names, physical addresses, email addresses, phone numbers, purchases, and partial payment card numbers from Suno's Stripe account, including card expiry dates.
Source Code Theft
The hacker also stole Suno's source code, which revealed how the company allegedly scraped millions of songs and lyrics from streaming sites like Deezer, Genius, and YouTube to train its AI models. Several major record labels are currently suing Suno, claiming its mass-scraping violates copyright law. The source code exposure could provide evidence in those lawsuits.
Company Silence
Suno has not publicly disclosed the cyberattack or notified individuals that their information was taken. Co-founder Mikey Shulman did not respond to TechCrunch's request for comment. The company's failure to disclose raises regulatory concerns under data protection laws.
What's Next
Suno may face regulatory scrutiny and potential fines for failing to disclose the breach. It remains unclear whether the company will notify affected users or when the full extent of the legal fallout will be known.
1 source
Suno breach exposes 55M users' data, source code
