AI music generator Suno breach affects 55M users, says Have I Been Pwned
The data breach notification service Have I Been Pwned has revealed that a cyberattack on AI music generator Suno in November 2025 compromised the personal information of over 55.3 million users.
A cyberattack on AI music generator Suno last year resulted in a hacker stealing the personal information of more than 55.3 million people, according to data breach notification service Have I Been Pwned. This marks the first public disclosure of the breach's scale.
Have I Been Pwned obtained a copy of the breached dataset, which reportedly includes customer names, physical addresses, email addresses, phone numbers, purchase history, and partial payment card details from Suno's Stripe account, including card expiry dates.
The breach occurred in November 2025 but only came to light recently following reporting by independent news outlet 404 Media. The data theft also included Suno's source code, which allegedly revealed how the company scraped millions of songs and lyrics from streaming sites like Deezer, Genius, and YouTube to train its AI models. Several major record labels are currently suing Suno, alleging copyright infringement.
Suno has not yet publicly disclosed the cyberattack or notified affected individuals. Company co-founder Mikey Shulman did not respond to requests for comment regarding the incident.