HIBP Finds Data Linked to 55.3M Suno and 23.3M Paidwork Accounts
Summary
Have I Been Pwned identified 55.3 million email addresses in data linked to Suno and 23.3 million in an allegedly stolen Paidwork database. Paidwork says it has no confirmed evidence of compromise and is investigating.
Key points
- Suno was reportedly targeted in November 2025; 404 Media later reported that attackers obtained source code and user data.
- Have I Been Pwned identified 55.3 million unique email addresses associated with Suno accounts.
- Suno's leaked data reportedly included phone numbers and tens of thousands of Stripe payment records with names, addresses, purchase amounts, and partial card details.
- A threat actor claimed to have targeted Paidwork in March 2026 and later leaked an 11 GB database allegedly containing information on roughly 22 million users.
- Have I Been Pwned identified 23.3 million unique email addresses in the Paidwork data, which also reportedly contained password hashes, bank account numbers, financial transactions, and personal details.
- Paidwork says it has no confirmed evidence that its systems or accounts were compromised and has escalated the report for investigation.
Article Details
- Victim Organization
- Suno and Paidwork
- Incident Type
- Data breaches involving reported theft of source code and user data from Suno, and an alleged theft and leak of a database associated with Paidwork.
- Data Types Exposed
- Email addresses
- Phone numbers
- Names
- Physical addresses
- Purchase amounts
- Partial payment card information (card type, expiration date, and last four digits)
- Password hashes
- Dates of birth
- Bank account numbers
- Financial transactions
- User profile information
- Source code
- Affected Records
- HIBP identified 55.3 million unique email addresses associated with Suno accounts and 23.3 million unique email addresses in the Paidwork leak. The Paidwork database was described by the threat actor as containing information on roughly 22 million users; this was not confirmed by Paidwork.
- Affected Data Size
- The allegedly stolen Paidwork database was 11 GB. No data size was reported for Suno.
- Operational Impact
- Suno source code and user data were reportedly obtained. No operational disruption was reported. Paidwork said it had no confirmed evidence that its systems or user accounts were compromised and had escalated the report for investigation.
- Ransom Or Extortion
- None reported.
- Claim Status
- alleged
Products
PaidworkHackers have stolen tens of millions of records from AI music generator Suno and gig-work platform Paidwork, according to data breach notification service Have I Been Pwned (HIBP).SunoHackers have stolen tens of millions of records from AI music generator Suno and gig-work platform Paidwork, according to data breach notification service Have I Been Pwned (HIBP).