Skip to content

Suno

Disclosed Jul 20, 20262 months ago55,282,226 accountsUnverified

AI music generator breach exposed 55M emails and some Stripe purchase records

Data from a November 2025 breach of AI music tool Suno surfaced in July 2026 with over 55 million unique emails, some phone numbers and tens of thousands of Stripe purchase records with partial card data. Suno said it does not have access to full card numbers.

What is known

People affected55,282,226 (accounts in the leaked data, per Have I Been Pwned)
DisclosedJul 20, 2026
HappenedNov 25, 2025
AttackHacking
Data exposedEmails, Names, Payment cards, Phone numbers, Addresses, Financial
SectorAI · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: Sunohaveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataJul 2055,282,226
ResearchtotalJul 20
History of this record
  • 2026-09-25 · source_type: aggregator to press · seed source
  • 2026-09-25 · country: empty to US · seed source
  • 2026-09-25 · sector: tech to ai · seed source
  • 2026-09-25 · attack: unknown to hacking · seed source
  • 2026-09-25 · summary: In November 2025, AI music generation tool Suno suffered a data breach that later came to light in July the following year . The data contained over 55M unique email addresses. Phone numbers were also present where they had been used as the to Data from a November 2025 breach of AI music tool Suno surfaced in July 2026 with over 55 million unique emails, some phone numbers and tens of thousands of Stripe purchase records with partial card data. Suno said it does not have access t · seed source
  • 2026-09-25 · title: empty to AI music generator breach exposed 55M emails and some Stripe purchase records · seed source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about Suno

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.