Suno Data Breach Exposes 55 Million Users, Plus Some Awkward Scraping Receipts
AI music generation platform Suno has had a rough week. A data breach affecting more than 55 million user accounts has now been catalogued by Troy Hunt's Have I Been Pwned service, giving us the first concrete sense of the damage.
Most of the exposed data was email addresses, though phone numbers showed up where users had registered that way instead. The more sensitive stuff came from tens of thousands of leaked Stripe records, which included names, home addresses, purchase amounts, and partial card details: card type, expiry date, and the last four digits. Not enough to commit fraud on its own, but enough to make anyone who's ever paid for Suno a bit uncomfortable.
The breach itself broke publicly last week, but HIBP's ingestion of the files puts actual numbers to what had been fairly vague reporting.
There's a second, arguably juicier element to this. The person claiming responsibility for the breach also released what they say is Suno source code from 2023 and 2024, purportedly showing the company scraping songs and lyrics from YouTube Music, Deezer, and Genius to feed its training pipeline. Suno has previously admitted training on music found on the open internet, framing it as fair use. Whether that framing survives legal scrutiny is another matter entirely.
The company hadn't responded to requests for comment at time of writing.
The timing is particularly bad given the company's existing legal troubles. The Recording Industry Association of America, representing Sony Music Entertainment, UMG Recordings, and Warner Records, filed suit against both Suno and rival Udio back in 2024. The allegation: mass scraping of copyrighted songs without permission from rights holders. The artists whose work is implicated read like a stadium tour lineup: Beyoncé, Taylor Swift, Bruce Springsteen, Dua Lipa.
Scraping music to train AI has been a contentious issue for years, and the major labels were already coordinating complaints before this breach surfaced. Suno has now handed critics fresh ammunition on two separate fronts simultaneously. That takes a certain kind of talent.