Hackers have stolen tens of millions of records from AI music generator Suno and gig-work platform Paidwork, according to data breach notification service Have I Been Pwned (HIBP).
Suno was targeted in November 2025, and the intrusion came to light earlier this month, when 404 Media reported that hackers had obtained source code and user data.
The stolen source code revealed that Suno had been scraping music and podcasts from major platforms such as Deezer, YouTube and Genius.
[ Read: New Index Tracks Material Breaches — And Refuses to Add Up the Losses ]
As for the compromised user data, HIBP analyzed it and reported on Monday that it had identified 55.3 million unique email addresses associated with Suno accounts.
The leaked data also included phone numbers and tens of thousands of Stripe payment records, including names, physical addresses, purchase amounts, and partial payment card information (card type, expiration date, and last 4 digits of the card number).
As for Paidwork, a platform where users complete small jobs for pay, hackers claimed to have targeted the company in March 2026.
Last week, a threat actor leaked an 11 GB database allegedly stolen from Paidwork, claiming that it stores the information of roughly 22 million users.
HIBP’s analysis identified 23.3 million unique email addresses in the leaked data, along with names, password hashes, physical addresses, dates of birth, phone numbers, bank account numbers, financial transactions, and user profile information.
SecurityWeek has reached out to both Suno and Paidwork for comment.
Related: OpenAI Says Its AI Models Broke Loose and Hacked Hugging Face
Related: Ransomware Group Threatening to Leak Data Stolen From Coca-Cola’s Fairlife
Related: Estée Lauder Discloses Impact From Oracle EBS Zero-Day Hack
