Observed Signal · Jul 21, 2026 · Data Breach · Source: techcrunch · Impact: 3/5 · Sentiment: Negative

Suno breach exposed data of 55.3M users

Executive Signal Summary

A November 2025 cyberattack on AI music generator Suno resulted in theft of a dataset affecting about 55.3 million people, according to breach tracker Have I Been Pwned, which obtained a copy of the breached data. Stolen fields reportedly include customer names, physical addresses, email addresses, phone numbers, purchase records and partial payment card numbers and expiry dates from Suno’s Stripe account. The intrusion also included Suno’s source code, which allegedly showed mass-scraping of songs and lyrics from streaming sites such as Deezer, Genius and YouTube to train its AI. The breach was first revealed publicly after reporting by 404 Media; Suno did not initially notify users publicly, though a Suno spokesperson later confirmed the company experienced a security incident in November 2025 and did not dispute the affected-user count.

Polaris7 AgentPolaris7 Strategic Assessment
High Confidence

Large-scale consumer data breach at an AI consumer app including source-code theft and scraped training data raises privacy, legal and trust concerns relevant to data/identity management and payment security, but it is not platform-level or industry-shifting.

SIGNAL RADAR

Track Suno Signals & Market Shifts in Real-Time

Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.

Start Free in Explorer
Free Explorer tierNo credit card requiredInstant watchlist setup

Key Takeaways & Evidence Grounding

  • Have I Been Pwned obtained a copy of the breached Suno dataset and reported the incident affected more than 55.3 million people.
  • Stolen data reportedly included customer names, physical addresses, email addresses, phone numbers, purchases, and partial payment card numbers and expiry dates from Suno’s Stripe account.
  • The breach occurred in November 2025 and was publicly revealed after reporting by independent outlet 404 Media.
  • The stolen data package included Suno’s source code, which showed alleged scraping of songs and lyrics from Deezer, Genius and YouTube to train its AI models.
  • Suno initially did not publicly disclose the attack or notify users; a Suno spokesperson (Rachel Racusen) later confirmed a November 2025 security incident and did not dispute the number of affected users.

Connected Companies & Entities

6 Entities mapped

“A cyberattack at AI music generator Suno last year allowed a hacker to steal the personal information of more than 55.3 million people....”

“The breach happened in November 2025, but was only recently revealed thanks to reporting by independent news outlet 404 Media....”

“The stolen data included partial payment card numbers taken from the company’s Stripe account, including card expiry dates....”

“The source code ... revealed how the company allegedly scraped millions of songs and lyrics from popular streaming sites, including Deezer, ...”

“The source code ... revealed how the company allegedly scraped millions of songs and lyrics from popular streaming sites, including Deezer, ...”

“TechCrunch reported the Have I Been Pwned findings in an article published July 21, 2026....”

Primary Source Grounding & Direct Attribution
Direct Origin Attribution
Primary Reporting: techcrunch•Published: Jul 21, 2026
Original Coverage Title: “AI music generator Suno breach affects 55M users, per Have I Been Pwned”

Related Market Signals & Shifts

Recent verified developments and strategic activity across this market segment.

PrivacyJul 15, 2026

Hack suggests Suno scraped YouTube for training data

A hacker claims to have used a supply-chain attack to access an employee’s credentials and source code from AI music generator Suno, revealing alleged scraping of decades of audio from services including YouTube Music, Deezer, Genius, stock music libraries and podcast RSS feeds. The breach reportedly exposed customer emails, phone numbers and partial credit card numbers processed via Stripe. Suno previously said it trains on “publicly available music files” and invoked fair use; major record labels contest the practice as illegal under the DMCA. Competitor Udio has faced similar scraping accusations, and Google (YouTube’s parent) is also facing related copyright litigation from publishers.

Read assessment
FundingJun 3, 2026

Suno Raises $400M Series D Amid Copyright Lawsuits

Suno, an AI music-generation company, raised $400 million in a Series D round that values the business at $5.4 billion. The financing, led by Bond Capital with participation from IVP, Forerunner, Union Square Ventures, Alkeon, Quiet and returning investors including Matrix, Lightspeed, Menlo Ventures and Schroders Capital, comes despite ongoing copyright litigation. Major labels Universal Music Group and Sony (and German collection society GEMA) are suing Suno over its training data; the labels recently moved to amend complaints to allege more than 61,000 additional copyrighted songs were used. Warner Music Group settled previously and reached a licensing deal. Suno continues to report heavy user activity and App Store chart success.

Read assessment
Creation & Asset ManagementFeb 27, 2026

Suno Surges: 2M Subscribers and $300M Revenue Milestone!

Suno, an AI music generator, announced via CEO Mikey Shulman that it now has 2 million paid subscribers and generates $300 million in annual recurring revenue. Three months earlier the company closed a $250 million funding round that valued it at $2.45 billion and reported $200 million in annual revenue, indicating rapid recent growth. Suno lets users create music from natural-language prompts; its synthetic songs have charted on Spotify and Billboard. The company has faced copyright litigation from musicians and labels, but Warner Music Group settled and struck a licensing deal permitting Suno to launch models using WMG’s catalog. The platform’s outputs have launched at least one viral artist career (Telisha Jones, who reportedly signed a ~$3M record deal with Hallwood Media). Prominent musicians have publicly criticized AI-generated music.

Read assessment

Track Real-Time Market Signals & Shifts

Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.