Suno data breach: what leaked and what to do
Suno (suno.com) had a data breach on 2025-11-25 affecting 55,282,226 accounts.
!Personal data leaked
Added to the catalogue 21 July 2026.
What leaked
- Email addresses
- Names
- Partial credit card data
- Phone numbers
- Physical addresses
- Purchases
What happened
In November 2025, AI music generation tool Suno suffered a data breach that later came to light in July the following year. The data contained over 55M unique email addresses. Phone numbers were also present where they had been used as the sign-up method. Although representing a small portion of the corpus, the breach also included tens of thousands of Stripe records relating to purchases, containing names, physical addresses, purchase amounts and partial credit card data including the card type, expiry date and last 4 digits. The company advised that "Suno does not have access to customers' full credit card numbers in Stripe".
Description from Have I Been Pwned, in its words.
What to do
- Warn staff: emails, texts or calls quoting leaked details are not proof the sender is genuine.
- If card or bank details leaked, watch statements and tell the bank; if identity documents leaked, consider a credit ban or alert.
- Turn on two-factor sign-in on that service and on your email.
Common questions
What leaked in the Suno breach?
Email addresses, Names, Partial credit card data, Phone numbers, Physical addresses, Purchases
When did the Suno breach happen?
The breach date is 2025-11-25; it was added to the public catalogue on 2026-07-20.
What should I do if my staff used this service?
Warn staff about emails, texts and calls quoting the leaked details, and watch for sign-in attempts on the services they use.
Was a staff address in this breach?
Check one address free, no storage. Breach Watch checks every staff address after each new breach.