Suno Data Breach: 55 Million Users' Emails, Payment Info Exposed

What happened

According to public breach records, the Suno data breach on November 25, 2025 is reported to have exposed the personal information of 55,282,226 accounts.

In November 2025, the AI music generation platform Suno suffered a massive data breach that exposed over 55 million user records. The data was initially compromised but only came to light in July 2026 when details were published following legal proceedings. The breach was particularly notable because it revealed that Suno had been scraping decades worth of music and podcast content from YouTube, Deezer, and Genius without authorization — a practice that was uncovered through hacked source code revealed as part of the breach disclosure.

The breach exposed extensive personal information including over 55 million unique email addresses. Phone numbers were also present for users who had used them as their sign-up method. The breach additionally included tens of thousands of Stripe records relating to purchases, containing names, physical addresses, purchase amounts and partial credit card data including card type, expiry date and the last 4 digits. Suno advised that they do not have access to customers' full credit card numbers in Stripe.

Passwords in this breach were not mentioned in the primary disclosure, suggesting they may have been stored separately or not exposed.

The breach also had significant legal implications, as it revealed Suno's unauthorized scraping practices. Hackers accessed source code that showed how Suno had scraped decades worth of music and podcasts from the internet to train its AI tool. This revelation came amid several major lawsuits accusing Suno of ripping songs directly from YouTube and other platforms for training data without proper licensing.

• Change your Suno password immediately, and change it anywhere you reused the same credentials.
• Enable two-factor authentication on your Suno account and any other account that shared that password.
• Be alert for targeted phishing emails, since your email address, name, physical address, and purchase history were exposed and can be used to craft convincing scam messages.
• Review your payment card statements for any unauthorized charges, since partial credit card data was exposed.
• Consider using a virtual card for online purchases to limit exposure of your real payment details.

What data was exposed

The following types of personal data were compromised:

• Email addresses
• Names
• Partial credit card data
• Phone numbers
• Physical addresses
• Purchases

Breach details

This summary is compiled from public breach-notification data and known leak databases. Figures reflect what those sources report and may be revised as more is learned. If something here looks wrong or you think your information is involved, contact our support team.

We report breaches as a factual record to help people check their exposure. Inclusion here is not an allegation of wrongdoing or negligence by Suno; it reflects a publicly reported security incident.

What to do now

Based on the data exposed in this breach, here are the steps you should take:

• Change your Suno password immediately, and change it anywhere you reused the same credentials.
• Enable two-factor authentication on your Suno account and any other account that shared that password.
• Watch for targeted phishing emails, since your email address, name, physical address, and purchase history were exposed and can be used to craft convincing scam messages.
• Review your payment card statements for any unauthorized charges, since partial credit card data including last 4 digits and expiry dates were exposed.
• Consider using virtual cards for online subscriptions to limit future exposure of your real payment details.

Check your exposure

Data breaches are one of the ways your personal information ends up on data broker sites. Run a free scan to see which sites are exposing your personal data — and take action to remove it.

Sources

• Hack Reveals Suno AI Music Generator Scraped YouTube, Deezer, and Genius — 404 Media
• Have I Been Pwned: Suno Data Breach