Massive Data Breach Exposed by Independent News Outlet
55.3 Million Users' Data Stolen in Suno AI Music Generator Cyberattack
A recent revelation by independent news outlet 404 Media has exposed a massive cyberattack on AI music generator Suno, resulting in the theft of over 55.3 million users' personal data. The data breach, which occurred in November 2025, included sensitive information such as names, physical addresses, email addresses, phone numbers, purchases, and partial payment card numbers.
The breach also involved the theft of Suno's source code, which revealed how the company allegedly scraped millions of songs and lyrics from popular streaming sites, including Deezer, Genius, and YouTube, to train its AI models. This practice has raised concerns about copyright law, with several major record labels currently suing Suno for allegedly violating their rights.
Suno has not yet publicly disclosed the cyberattack or notified individuals that their information was taken. In a statement to TechCrunch, Suno spokesperson Rachel Racusen confirmed that the company experienced a security incident in November 2025 but declined to provide further details.
Affected Data and Consequences
- Names
- Physical addresses
- Email addresses
- Phone numbers
- Purchases
- Partial payment card numbers
- Source code
- Allegedly scraped songs and lyrics from popular streaming sites
Reactions and Next Steps
The recent revelation highlights the importance of robust data security measures in the tech industry. Companies must prioritize protecting sensitive user information to prevent such massive data breaches.
Suno's failure to publicly disclose the cyberattack and notify affected users raises concerns about transparency and accountability. As the investigation continues, it remains to be seen how Suno will address the issue and ensure the protection of its users' data in the future.