AI music generator Suno suffered a cyberattack that exposed personal information linked to more than 55.3 million people, according to breach-notification service Have I Been Pwned. The November 2025 incident also compromised company source code that reportedly documented how Suno gathered music and lyrics for AI training.
Suno confirmed that a security incident occurred but has not disputed the reported number of affected users. The company has not published a breach announcement on its website or provided evidence that it notified affected individuals.
Names, Addresses and Payment Details Exposed
Have I Been Pwned obtained a copy of the breached dataset and found names, physical addresses, email addresses, phone numbers and purchase histories. The files also contained partial payment card numbers and expiration dates taken from Suno’s Stripe account, but not complete card details.
The breach was first reported by independent publication 404 Media. Suno spokesperson Rachel Racusen confirmed that the company experienced an incident in November 2025 but did not explain why it had not made a public disclosure.
Suno has not said how the attacker entered its systems or whether the vulnerability has been fixed. The company also has not disclosed whether it has offered account monitoring or other assistance to affected users.
Stolen Code Reveals Music Collection Methods
The attacker also obtained source code and internal documents describing Suno’s model-training operations. The material reportedly showed that the company collected millions of songs, lyrics and other audio files from YouTube Music, Deezer, Genius and several stock-music and podcast sources.
The leaked records indicated that Suno gathered more than two million YouTube Music clips and large quantities of material from other services. Suno said the compromised code was outdated and maintained that no sensitive personal information had been exposed, a position that conflicts with the dataset reviewed by Have I Been Pwned.
Breach Adds Evidence to Copyright Disputes
Major record companies sued Suno in 2024, alleging that it copied protected recordings without permission to train its models. The Recording Industry Association of America said the lawsuits involved large-scale infringement of copyrighted sound recordings.
Suno has argued that training on publicly available music qualifies as fair use. The stolen source code provides further details about the services and methods allegedly used to obtain that material, while the copyright cases remain active.
Featured image credits: Magnific.com
For more stories like it, click the +Follow button at the top of this page to follow us.