Suno faces a new proposed class action over a November 2025 data breach that reportedly exposed personal information belonging to 55.3 million users.
The complaint was filed on September 3 in the US District Court for the District of Massachusetts by Michael Beckham, a South Dakota resident. Suno is headquartered in that district.
In the filing, Beckham says he has “experienced an increase in unsolicited spam telephone calls and phishing attempts” since the breach. He adds that he “spent approximately ten hours investigating the incident, attempting to protect his other online accounts, reviewing and strengthening account security, monitoring for misuse, and consulting counsel regarding protective measures and his legal rights.”
The breach occurred in November 2025 but was not publicly disclosed until July 2026, when breach-notification service Have I Been Pwned added the dataset to its database.
Suno had already been named in two class actions over the breach; those cases were recently consolidated into a single action. Beckham’s complaint states that his filing is related to that consolidated case.
He is seeking:
- damages;
- complete individualized notice of the information affected;
- identity-theft, phishing and account-protection services for not less than five years;
- prospective security, retention and deletion measures.
The proposed class would cover all US individuals whose personal information was included in the dataset obtained from Suno, with a separate South Dakota subclass.
