Overview
- The company was breached in November 2025 and Have I Been Pwned confirmed on July 21, 2026 that about 55.3 million people had records taken from Suno.
- The stolen dataset, obtained and analyzed by Have I Been Pwned, includes names, email addresses, phone numbers, physical addresses, purchase histories, and partial Stripe payment card data with expiry dates.
- Leaked source code and ingestion logs document automated scraping of millions of tracks, lyrics and podcast items from platforms such as YouTube, Deezer and Genius and show technical steps used to collect and isolate audio.
- Suno has not publicly disclosed the breach or notified affected users and the company’s co‑founder did not respond to requests for comment reported in current coverage.
- Major record labels are citing the leaked material in active copyright lawsuits and the disclosures could prompt closer regulatory scrutiny of AI training data, breach notification rules and industry licensing practices while raising risks of fraud for affected users.