Suno breach exposes 55 million accounts eight months after a developer was compromised

Data from a November 2025 breach at AI music platform Suno surfaced publicly in July, with Have I Been Pwned indexing 55,282,226 unique email addresses. Alongside the addresses, the corpus held names, phone numbers, physical addresses, and purchase records, plus tens of thousands of Stripe entries containing partial card data: card type, expiry date, and the last four digits. Reporting indicates the intrusion started with malware delivered through third-party code on a developer's machine, which yielded credentials for private repositories and internal databases. Suno has said no sensitive personal information was compromised and has not notified affected users.

Check

Suno users should check Have I Been Pwned, change the password there and anywhere it was reused, and be alert to phishing that references their account or past purchases.

Affected

Roughly 55 million Suno users whose email addresses, names, phone numbers, physical addresses, and purchase records were exposed, with partial card data for a subset; most have not been notified.

Fix

Use unique passwords and enable multi-factor authentication where offered. Organizations should treat developer workstations as high value targets, since third-party code running there can hand over repository and database access.