Suno data breach: 55.3M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2026-07-20
In November 2025, AI music generation tool Suno suffered a data breach that later came to light in July the following year. The data contained over 55M unique email addresses. Phone numbers were also present where they had been used as the sign-up method. Although representing a small portion of the corpus, the breach also included tens of thousands of Stripe records relating to purchases, containing names, physical addresses, purchase amounts and partial credit card data including the card type, expiry date and last 4 digits. The company advised that "Suno does not have access to customers' full credit card numbers in Stripe". Exposed data: email addresses, names, partial credit card data, phone numbers, physical addresses, purchases. The breach dates from Nov 25, 2025; Have I Been Pwned loaded it on Jul 20, 2026.
What to do
- If you had a Suno account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
