• 2 min read
Suno breach exposed more than 55 million accounts
Have I Been Pwned says a Suno breach exposed more than 55 million accounts, plus Stripe records with addresses and partial card data.
Image: The Register
Suno, the AI music generator, exposed more than 55 million user accounts in a data breach, according to Troy Hunt’s Have I Been Pwned (HIBP) service, which has now ingested the leaked files.
The dump consisted primarily of email addresses. Phone numbers were also included for users who registered with a number instead of an email address.
What the Suno breach exposed
HIBP said the files also contained tens of thousands of Stripe records. Those records revealed:
- Names
- Physical addresses
- Purchase amounts
- Card types
- Expiry dates
- The last four digits of payment cards
HIBP’s breakdown provides the first estimate of the breach’s scale since reports of the incident emerged last week. Suno did not immediately respond to The Register’s request for comment.
Recommended reading
Ostium loses $23.75 million in price-feed attack
The person who claimed responsibility for the breach also supplied source code apparently dating from 2023 and 2024. They said it showed Suno scraping millions of songs and lyrics from services including YouTube Music, Deezer, and Genius to train its AI.
Suno has acknowledged training its AI on music available on the open internet, while arguing that the practice qualifies as fair use.
Suno’s copyright litigation
The company’s data practices are part of a broader dispute over AI-generated music and copyright. Major record labels complained about mass data scraping and alleged copyright infringement by AI companies before Suno’s breach in November 2025.
The Recording Industry Association of America (RIAA) represents labels that sued Suno and rival Udio in 2024, alleging that the companies scraped songs at scale without permission from copyright holders. Plaintiffs included Sony Music Entertainment, UMG Recordings, and Warner Records, whose rosters include Bruce Springsteen, Beyoncé, Taylor Swift, and Dua Lipa.
Warner has since settled its litigation with Suno and entered a commercial partnership with the company. Sony and UMG are continuing their claims in court.
Security Editor
Sophia unpacks the invisible wars happening on our networks. Covering cybersecurity, privacy legislation, and cryptography, she exposes how our data is weaponized and defended. Before joining for(geeks), she spent years as a penetration tester. She's the reason the rest of the team uses physical security keys.
via The Register
