Suno: data leak affecting 55.3 million users and a risk for the AI industry

Colleagues, I would like to highlight a cybersecurity and AI-related development.

According to Have I Been Pwned, AI music generator Suno suffered a data breach affecting more than 55.3 million people.

The leaked database contained names, addresses, email addresses, phone numbers, purchases, and partial card data from Stripe, including card expiry dates.

The incident occurred in November 2025, but was only disclosed publicly now. The source code was also compromised, revealing large-scale scraping of songs and lyrics from Deezer, Genius, and YouTube.

Suno has not publicly disclosed the attack or notified affected users.

Why this matters: it is a clear example of how AI services carry both data security and copyright risks.

How do you assess such incidents for the AI market?