Massive Data Breach at Suno AI Music Generator
A devastating cyberattack at AI music generator Suno has exposed the personal data of over 55.3 million people, according to the data breach notification service Have I Been Pwned.
The Breach: A Year in the Making
The breach, which occurred in November 2025, was only recently revealed thanks to reporting by independent news outlet 404 Media. Unfortunately, Suno has yet to publicly disclose the incident or notify individuals whose information was taken.
The stolen data included customers' names, physical addresses, email addresses, phone numbers, purchases, and partial payment card numbers taken from the company's Stripe account, including card expiry dates.
Suno's source code was also compromised, revealing how the company allegedly scraped millions of songs and lyrics from popular streaming sites, including Deezer, Genius, and YouTube, to train its AI models. This has significant implications for the music industry, with several major record labels currently suing Suno for copyright infringement.
- The sheer scale of the data breach is a stark reminder of the importance of robust cybersecurity measures in the tech industry.
- The fact that Suno has not yet notified affected individuals raises serious concerns about the company's transparency and accountability.
- The music industry is facing a major crisis, with the Suno breach highlighting the need for more stringent copyright protections and better regulation of AI-powered music generation.