Suno

Profile narrative

Suno operates as an artificial intelligence‑focused music company that develops models capable of generating audio content. The firm collects music recordings from publicly available services such as YouTube Music, Deezer and Genius to train its AI systems. These trained models are then used to power a service that allows users to create, modify or purchase AI‑generated tracks. Payment processing for the service is handled through Stripe, as evidenced by the exposure of purchase records in the 2025 breach. The company maintains source code repositories that contain the algorithms and data‑pipeline logic behind its music generation platform.

Suno is headquartered in the United States of America. The security incident disclosed on 1 November 2025 revealed that personal information belonging to roughly 55.3 million users was compromised, indicating a substantial user base. The exposed data included email addresses, telephone numbers, physical addresses and Stripe transaction records with partial card details. This scale of affected accounts provides the only explicit quantitative measure of the company’s reach that is publicly available.

Distinguishing characteristics of Suno include its reliance on large‑scale scraping of copyrighted music to train proprietary AI models, a practice that has drawn attention in ongoing copyright litigation with major record labels. The firm’s development environment centres on source code repositories that were accessed during the breach via a supply‑chain worm that compromised an employee device. The incident also highlighted weaknesses in the company’s notification practices, leading to a class‑action lawsuit alleging inadequate security and delayed disclosure. Together, these factors position Suno as a notable player in the AI‑generated music sector whose operations intersect with intellectual‑property, data‑privacy and supply‑chain security concerns.

Incidents

1 incident linked to this organisation.