Made a track on Suno? Details from 55 million accounts just leaked online

If you've ever made a song with Suno, the AI music app, your details may now be circulating online. Data from a November 2025 breach of the company surfaced publicly last week, and the breach-tracking service Have I Been Pwned added it to its database on July 20 - 55.3 million accounts in all.

Most of what leaked is email addresses, but for some people there's more. Where a phone number was used to sign up, that's in there too. And tens of thousands of Stripe payment records were exposed, holding names, physical addresses, purchase amounts and partial card details: the card type, expiry date and last four digits. Full card numbers weren't included - Suno says it never stores them. TechCrunch reports the attackers got in after malware on a developer's laptop handed over credentials. As of last week the company still hadn't notified affected users directly.

Partial card data and an expiry date can't be used to buy anything on their own, but they're gold for a convincing scam. Expect the leaked emails and numbers to feed phishing texts and calls that name-drop your Suno account or a "recent charge" to sound real. Treat any unexpected billing-problem message about the service as suspect, and don't click links inside it.

Check whether your address is in the leak at haveibeenpwned.com; if it is, change your Suno password and anywhere you reused it. Tendvane's Privacy & accounts check runs that same lookup across your logins, so you can see at a glance which ones have shown up in a known breach and need a fresh password.