Suno Breach Exposes 55.3 Million Users, Revealing Song-Scraping Code
Updated
Updated · TechCrunch · Jul 21
Suno Breach Exposes 55.3 Million Users, Revealing Song-Scraping Code
3 articles · Updated · TechCrunch · Jul 21
Summary
Have I Been Pwned said a November 2025 hack at Suno exposed personal data from more than 55.3 million people, giving the first measure of the breach’s scale.
The stolen dataset included names, physical and email addresses, phone numbers, purchase records, and partial Stripe card details with expiry dates.
The breach also took Suno source code that allegedly showed the AI music company scraped millions of songs and lyrics from Deezer, Genius and YouTube to train its models.
Suno has not publicly disclosed the attack or notified affected users, while major record labels are already suing the company over alleged copyright violations tied to that scraping.
Suno's stolen code allegedly proves music scraping. Could this leak be the music industry's ultimate weapon in its lawsuits against AI?
Suno claims no sensitive data was lost, but 55M user details were stolen. What are the true risks for users of generative AI platforms?
Suno raised $650M while hiding a 55M user data breach. Is the AI investment boom built on a foundation of undisclosed risk?
55 Million Users Exposed: Inside the Suno AI Music Data Breach and Its Industry-Shaking Fallout
Overview
The Suno cyberattack began in November 2025 but was only revealed to the public in July 2026 after investigative reporting. This delayed disclosure alarmed the technology and AI sectors, as it became clear that a hacker had breached Suno’s systems, compromising both internal source code and sensitive customer information. The public revelation immediately triggered major concerns among industry stakeholders, raising questions about Suno’s crisis management and transparency. The incident not only exposed critical security gaps but also intensified scrutiny of AI companies’ data practices and their responsibilities to users and partners.