After Suno suffered a cyberattack last year, personal information of over 55.3 million users was stolen. The data breach notification service Have I Been Pwned said it obtained a copy of the leaked data and revealed the full scale of the incident for the first time.
What information was leaked?
The stolen data included customers’ names, home addresses, email addresses, phone numbers, purchase records, and partial credit card numbers and expiration dates from Suno’s Stripe account.
The event occurred last year.
This attack occurred in November 2025, but was only recently exposed due to reporting by the independent media outlet 404 Media. Suno has not yet publicly disclosed the attack or notified affected users.
The company has not yet responded.
Suno co-founder Mikey Shulman did not respond to TechCrunch's request for comment on the matter.