A hacker has compromised the personal data of over 55 million users of Suno, the AI-powered music generation platform, in what ranks among the largest consumer data exposures in the AI industry to date. The breach included names, phone numbers, physical addresses, purchase histories, and partial payment card details.
The breach happened in November 2025. It wasn’t publicly disclosed until July 2026. That’s an eight-month gap between the incident and disclosure.
What was exposed and why it matters
The compromised records span over 55 million unique email addresses. The leaked data included names, physical addresses, phone numbers, purchase history, and partial payment card details.
Suno characterized the breach as involving “outdated source code” and claimed it did not necessitate user notifications under applicable privacy laws.
