AI music platform Suno hits bum note as 55M users exposed in data breach, claims infosec expert

{
  "signal_id": "9dfa6aaf-cc9e-5eaa-b9cd-964c56c2fd14",
  "signal_type": "news",
  "signal_subtype": "security_incident",
  "detected_at": "2026-07-21T13:45:00+00:00",
  "company": {
    "name": "Suno",
    "domain": "suno.ai"
  },
  "data": {
    "url": "https://www.theregister.com/security/2026/07/21/breach-of-ai-music-platform-suno-affected-55m-user-accounts/5275514",
    "title": "AI music platform Suno hits bum note as 55M users exposed in data breach, claims infosec expert",
    "excerpt": "security Have I Been Pwned confirms scale for first time A data breach at AI music generator platform Suno exposed more than 55 million user accounts, according to Troy Hunt's Have I Been Pwned service, which ingested the files. The dump consisted mostly of email addresses, although phone numbers were also included where users had signed up with them instead, HIBP said. Tens of thousands of Stripe records further revealed data such as names, physical addresses, purchase amounts, as well as partial credit card data, such as card type, expiry date, and the last four digits of the card number. The breakdown from Have I Been Pwned puts a figure on the scale of Suno's data breach for the first time since the news of the slip-up broke last week. The individual who claimed responsibility for breaching Suno also supplied source code apparently dating from 2023 and 2024 that they said showed the company scraping millions of songs and lyrics from services including YouTube Music, Deezer, and Genius to train its AI. Suno has acknowledged training its AI on music available on the open internet, while arguing that doing so constitutes fair use. It did not immediately respond to The Register's request for comment. AI's imposition on the arts has been a persistent topic of ethical and moral debate for years. Major record labels came together to complain about mass data scraping and copyright...",
    "summary": "AI music platform Suno suffered a data breach that exposed more than 55 million user accounts, including email addresses, phone numbers, and partial credit card data.",
    "planning": false,
    "image_url": "https://image.theregister.com/242891.jpg?imageId=242891&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683",
    "confidence": 0.95,
    "published_at": "2026-07-21T13:45:00Z",
    "vulnerability": "55 million user accounts exposed, including email addresses, phone numbers, and partial credit card data",
    "article_sentence": "A data breach at AI music generator platform Suno exposed more than 55 million user accounts, according to Troy Hunt's Have I Been Pwned service, which ingested the files."
  }
}

curl https://signals.autobound.ai/v1/signals/9dfa6aaf-cc9e-5eaa-b9cd-964c56c2fd14 \
  -H "X-API-KEY: $AUTOBOUND_API_KEY"

curl -X POST https://signals.autobound.ai/v1/companies/enrich \
  -H "X-API-KEY: $AUTOBOUND_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"domain":"suno.ai","limit":20}'