Suno AI Music Platform Breach Exposes 55 Million User Accounts
A data breach at AI music generator Suno has compromised over 55 million user accounts, according to Have I Been Pwned (HIBP), which analyzed the leaked files. The exposed data primarily includes email addresses, with some accounts also containing phone numbers. Additionally, tens of thousands of Stripe payment records were exposed, revealing names, physical addresses, purchase amounts, and partial credit card details including card types, expiry dates, and the last four digits of card numbers.
The breach was first reported last week, but HIBP’s analysis now provides the first confirmed scale of the incident. The attacker, who claimed responsibility, also shared source code from 2023 and 2024, alleging it proves Suno scraped millions of songs and lyrics from platforms like YouTube Music, Deezer, and Genius to train its AI models.
Suno has previously acknowledged using publicly available music for training but maintains that this practice falls under fair use. The company has not yet responded to requests for comment on the breach.
The incident adds to ongoing legal and ethical debates over AI’s use of copyrighted material. In 2024, major record labels including Sony Music Entertainment, UMG Recordings, and Warner Records filed lawsuits against Suno and rival Udio, accusing them of mass scraping without permission. While Warner settled its case and formed a commercial partnership with Suno, Sony and UMG continue litigation, with artists like Bruce Springsteen, Beyoncé, Taylor Swift, and Dua Lipa represented in the dispute. The breach underscores the broader tensions between AI development and copyright enforcement in the music industry.
Suno Ai presented by LCei cybersecurity rating report: https://www.rankiteo.com/company/suno-ai-by-lcei
Soundstripe cybersecurity rating report: https://www.rankiteo.com/company/soundstripe
"id": "SUNSOU1784644283",
"linkid": "suno-ai-by-lcei, soundstripe",
"type": "Breach",
"date": "7/2026",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'customers_affected': '55 million user accounts',
'industry': 'AI Music Generation',
'name': 'Suno',
'type': 'Company'}],
'data_breach': {'data_exfiltration': 'Yes (source code and user data leaked)',
'file_types_exposed': ['Source code (2023-2024)',
'User data records'],
'number_of_records_exposed': '55 million user accounts',
'personally_identifiable_information': 'Yes (names, email '
'addresses, phone '
'numbers, physical '
'addresses)',
'sensitivity_of_data': 'High (PII and payment information)',
'type_of_data_compromised': ['Email addresses',
'Phone numbers',
'Stripe payment records (names, '
'physical addresses, purchase '
'amounts, partial credit card '
'details)']},
'description': 'A data breach at AI music generator Suno has compromised over '
'55 million user accounts, exposing email addresses, phone '
'numbers, and Stripe payment records. The attacker also leaked '
'source code, alleging Suno scraped millions of songs and '
'lyrics from platforms like YouTube Music, Deezer, and Genius '
'to train its AI models.',
'impact': {'brand_reputation_impact': 'High (ongoing legal disputes, '
'copyright allegations)',
'data_compromised': 'Email addresses, phone numbers, Stripe '
'payment records (names, physical addresses, '
'purchase amounts, partial credit card '
'details)',
'identity_theft_risk': 'High (exposure of PII and partial payment '
'details)',
'legal_liabilities': 'Ongoing lawsuits from Sony Music '
'Entertainment and UMG Recordings',
'payment_information_risk': 'High (partial credit card details '
'exposed)'},
'investigation_status': 'Ongoing',
'motivation': 'Data exfiltration, potential financial gain, or reputational '
'harm',
'references': [{'source': 'Have I Been Pwned (HIBP)'}],
'regulatory_compliance': {'legal_actions': ['Lawsuit from Sony Music '
'Entertainment',
'Lawsuit from UMG Recordings']},
'threat_actor': 'Unknown attacker (claimed responsibility)',
'title': 'Suno AI Music Platform Breach Exposes 55 Million User Accounts',
'type': 'Data Breach'}