Last year, a cyberattack on AI music generator Suno allowed a hacker to steal the personal information of more than 55.3 million people, according to the data breach notification service. Have I been taken hostage?Offers first glimpse of scale of data theft.
Per Have I Been Pwned, which obtained a copy of the breached dataset, the stolen data included customers’ names, physical addresses and email addresses, phone numbers, purchases and partial payment card numbers taken from the company’s Stripe account, including card expiration dates.
The breach occurred in November 2025, but was revealed only recently due to reporting by independent news outlets 404 media.
The data breach also included Suno’s source code, which revealed how the company allegedly scraped millions of songs and lyrics from popular streaming sites including Deezer, Genius, and YouTube to train its AI models. several major record labels Currently suing SunoClaiming that its large-scale scraping efforts violate copyright law.
Suno has not yet publicly disclosed the cyberattack, or notified individuals that their information was taken. Listen co-founder Mickey Shulman did not respond to TechCrunch’s request for comment about the incident.
