A cyberattack at AI music generator Suno last year leaked personal information from over 55.3 million users, according to Have I Been Pwned.

The stolen data included names, addresses, email and phone numbers, purchase histories, and even partial payment card details taken from the company's Stripe account — including expiry dates.

This breach, which occurred in November 2025, was only recently revealed by independent news outlet 404 Media. Suno’s source code also got into the wrong hands, exposing how it allegedly scraped millions of songs and lyrics from popular streaming sites like Deezer, Genius, and YouTube to train its AI models.

Now, several major record labels are suing Suno for mass-scraping efforts that they claim violate copyright law. Suno has yet to make a public statement about the incident or inform affected users of their data exposure.