Suno, the controversial AI music platform that allows users to generate entire songs from text prompts, has been hit with a class action lawsuit over a data breach that reportedly exposed the personal information of 55.3 million users, Music Business Worldwide reports.Ad 0:00 Click for sound 0:00 / 0:00 The suit was filed July 24 in the US District Court for the District of Massachusetts.
“Plaintiff and Class Members were wholly unaware of the Data Breach for nine months until public news sources disclosed the breach,” the complaint states.According to the documents, an unauthorized party accessed Suno’s network in or around November 2025 and stole user data including names, physical addresses, email addresses, phone numbers, purchase histories and partial payment card details.
The breach became public earlier this month when data breach-notification service Have I Been Pwned reported 55.3 million unique email addresses had been exposed.The complaint alleges that Suno knew about the incident in November but did not tell affected users, who learned of the breach only when it was reported publicly earlier this month.
In a statement, a Suno spokesperson said the company experienced “a security incident that was quickly contained” in November 2025, adding that it “primarily involved outdated source code and a limited amount of information associated with certain users.” A report from 404 Media earlier this month alleged Suno scraped audio from YouTube Music, Deezer, Genius and several stock audio libraries to train its models, appearing to corroborate the allegations.The company said it does not store full payment card information or bank account details, and that it hired a third-party cybersecurity expert to audit its findings.
The filing accuses Suno of neglecting to implement adequate data security measures, and seeks damages alongside a court order requiring Suno to provide ...