Suno, Paidwork Data Breaches Affect Tens of Millions of Accounts
Hackers breach Suno and Paidwork, exposing 55.3M and 23.3M accounts with financial data.
Two major platforms—AI music generator Suno and gig-work platform Paidwork—suffered significant data breaches affecting tens of millions of users. Suno was compromised in November 2025 with 55.3 million email addresses, phone numbers, and partial payment card information leaked; Paidwork was targeted in March 2026 with 23.3 million user records including bank account numbers and financial transactions exposed. The breaches were analyzed and reported by Have I Been Pwned (HIBP).
AI summary of the linked source. Not reviewed by an editor. How this works
Run Suno?
Get an email when a new story names Suno, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonTwo platforms—AI music service Suno and gig-work platform Paidwork—collectively exposed over 78 million user records, including highly sensitive financial data such as partial payment card numbers and bank account details. The exposure of financial information alongside personally identifiable data significantly elevates the risk of identity theft and fraud for affected users. These incidents highlight a persistent failure to adequately protect sensitive financial data at rest, enforce least-privilege access controls on user databases, and detect unauthorized access in a timely manner. The fact that breaches in late 2025 and early 2026 were surfaced through Have I Been Pwned rather than proactive internal detection suggests critical gaps in both monitoring and incident response capabilities.
What helps against this
How we list vendors- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.
- Third-party risk management (TPRM)
You know which suppliers could hurt you, and you hear quickly when one of them is breached.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Suno breach
- malware — Paidwork breach