After a cyber attack on Suno last year, more than 55.3 million users of personal information were stolen. Have I Been Pwned stated that it had obtained a copy of the leaked data and disclosed for the first time the scale of the incident.

What did you leak?

The stolen data include the name of the client, the home address, the mailbox, the telephone number, the purchase record, as well as some bank cards and the expiry date of the Stripe account from Suno.

It happened last year.

The attack took place in November 2025, but was only recently exposed by independent media reports of 404 Media. Suno has not publicly disclosed the attack and has not notified the affected users.

The company has not responded.

Suno co-founder Mikey Shulman did not respond to TechCrunch's request for comment on the matter.