• 2 min read
55M Suno accounts exposed in reported breach
Have I Been Pwned says a breach tied to AI music platform Suno exposed more than 55 million accounts, including emails and some Stripe records.
Image: The Register
More than 55 million user accounts tied to AI music generator Suno were exposed in a data breach, according to Troy Hunt’s Have I Been Pwned (HIBP), which says it has ingested the leaked files.
HIBP said the dump was made up mostly of email addresses, with phone numbers included for users who signed up that way instead. It also found tens of thousands of Stripe records containing details including names, physical addresses, purchase amounts, and partial payment card information such as card type, expiry date, and the last four digits of card numbers.
The HIBP data appears to be the first public indication of the breach’s scale since reports of the incident emerged last week. According to The Register, the person claiming responsibility for the intrusion also provided source code apparently dated 2023 and 2024. That material allegedly shows Suno scraping millions of songs and lyrics from services including YouTube Music, Deezer, and Genius to train its models.
Suno has acknowledged training its AI on music available on the open internet, while maintaining that the practice qualifies as fair use. The company did not immediately respond to The Register’s request for comment.
The breach lands amid long-running legal and ethical fights over AI companies' use of copyrighted music. In 2024, record labels represented by the Recording Industry Association of America (RIAA) sued Suno and rival Udio, alleging they scraped songs at scale without permission from copyright holders.
Recommended reading
1,000 GPUs could destabilize a power grid, researchers warn
Plaintiffs included Sony Music Entertainment, UMG Recordings, and Warner Records, whose catalogs include artists such as Bruce Springsteen, Beyoncé, Taylor Swift, and Dua Lipa. Warner has since settled its litigation with Suno and entered a commercial partnership with the company, while Sony and UMG are still pursuing their claims in court.
Security Editor
Sophia unpacks the invisible wars happening on our networks. Covering cybersecurity, privacy legislation, and cryptography, she exposes how our data is weaponized and defended. Before joining for(geeks), she spent years as a penetration tester. She's the reason the rest of the team uses physical security keys.
via The Register
