Suno Faces Class Action Over Data Breach Affecting 55 Million Users

Breach Exposed Millions of User Records

An unauthorized party accessed Suno's network in or around November 2025 and stole user data including names, physical addresses, email addresses, phone numbers, purchase histories and partial payment card details, according to court documents filed July 24 in the US District Court for the District of Massachusetts.

The breach became public earlier this month when data breach-notification service Have I Been Pwned reported 55.3 million unique email addresses had been exposed. The complaint alleges that Suno knew about the incident in November but did not tell affected users, who learned of the breach only when it was reported publicly.

Company Says Incident Was "Quickly Contained"

In a statement, a Suno spokesperson said the company experienced a security incident that was quickly contained in November 2025, adding that it primarily involved outdated source code and a limited amount of information associated with certain users. The company said it does not store full payment card information or bank account details, and that it hired a third-party cybersecurity expert to audit its findings.

The filing accuses Suno of neglecting to implement adequate data security measures, and seeks damages alongside a court order requiring Suno to provide class members with at least 10 years of credit monitoring services.

Latest Legal Challenge for Embattled AI Platform

The class action adds to an already turbulent legal stretch for Suno, which in June raised over $400 million in a Series D funding round, valuing it at $5.4 billion as it defends itself against over a dozen lawsuits since a watershed copyright infringement claim from UMG, Sony and Warner back in the summer of 2024. It's also battling a lawsuit filed recently by Hagens Berman, the firm behind the largest litigation settlement in history.

The case is part of a broader debate over AI's growing role in music production, with disputes over royalties, licensing and the use of copyrighted material to train AI models continuing to divide the industry. A report from 404 Media earlier this month alleged Suno scraped audio from YouTube Music, Deezer, Genius and several stock audio libraries to train its models.