AI music generator Suno is facing a proposed class action lawsuit after a data breach exposed the personal information of 55.3 million users.
Customer Alec Pilavian filed the lawsuit on Friday, July 24, in the US District Court for the District of Massachusetts. Pilavian is seeking to represent all individuals in the United States whose data was compromised.
The complaint alleges that Suno was aware of the breach, which occurred in November 2025, but did not notify affected users. A hacker stole customer data including:
- Names
- Physical addresses
- Email addresses
- Phone numbers
- Purchase histories
- Partial payment card details
The breach became public knowledge this month after a report by the breach notification service Have I Been Pwned.
The filing accuses Suno of prioritizing profits over adequate data security and states that users now face an increased risk of fraud.
A Suno spokesperson provided the following statement:
“We are reviewing this complaint. Trust is the foundation of any product people use every day and we take safeguarding our community’s data security extremely seriously. In November of 2025, we experienced a security incident that was quickly contained. Subsequent investigation found that it primarily involved outdated source code and a limited amount of information associated with certain users, although we want to reassure our community that we do not store their full payment card information or collect bank account details. We also hired a third-party cybersecurity expert to audit our initial findings. We know any security incident can be alarming. As Suno continues to grow, we are continuing to invest in our security program and the team behind it.”
