Suno Data Breach November 2025 - What Was Exposed and What To Do

What Happened

In November 2025, AI music generation tool Suno suffered a data breach that later came to light in July the following year. The data contained over 55M unique email addresses. Phone numbers were also present where they had been used as the sign-up method. Although representing a small portion of the corpus, the breach also included tens of thousands of Stripe records relating to purchases, containing names, physical addresses, purchase amounts and partial credit card data including the card type, expiry date and last 4 digits. The company advised that "Suno does not have access to customers' full credit card numbers in Stripe".

Breach date

2025-11-25

Records affected

55,282,226

Verified

Yes

Domain

suno.com

What Was Exposed

The following data types were included in the breach:

• Email addresses
• Names
• Partial credit card data
• Phone numbers
• Physical addresses
• Purchases

What You Should Do

If you had an account with Suno, take these steps immediately:

1. Check if your account was affected at HaveIBeenPwned.com
2. Watch for phishing emails that reference the breach or impersonate the affected company
3. Contact your bank or card issuer to request a replacement card
4. Review recent statements for unauthorized transactions
5. Be alert for social engineering attempts using your exposed personal information
6. Enable two-factor authentication on the affected service if available
7. Consider using a password manager to generate unique passwords for each service

FAQ