Photo Credit: Filipe Nobre
Suno gets slapped with a proposed class action lawsuit over the data breach that reportedly exposed the personal information of 55.3 million users.
As if on cue, Suno has been hit with a proposed class action lawsuit. The complaint follows news last week that a previously unreported Suno security breach had exposed the personal account details of over 55 million users. The stolen data reportedly included customer names, physical addresses, email addresses, phone numbers, purchase history, and partial payment card numbers taken from Suno’s Stripe account, including card expiration dates.
Filed on July 24 in the U.S. District for the District of Massachusetts, where Suno is headquartered, the lawsuit accuses Suno of providing inadequate security of personal account details to maximize profits. The complaint also blasts Suno for failing to notify affected users, alleging that the company “has not provided, and does not appear to have provided, any notice regarding the data breach.” The breach was only revealed nine months after the fact, according to 404 Media.
The proposed class action names plaintiff Alec Pilavian, a Florida resident and Suno customer who aims to serve as class representative of everyone in the United States whose data was compromised in the breach.
“Instead of providing a reasonable level of security that would have prevented the data breach, (Suno) calculated to increase its own profit at the expense of (its customers) by utilizing cheap, ineffective security measures and diverting those funds to its own personal use,” the complaint alleges.
As a result, the filing says, Suno’s customers are “left to speculate as to where their (information) ended up, who has used it, and for what potentially nefarious purposes.”
“We are reviewing this complaint,” said a Suno spokesperson. “Trust is the foundation of any product people use every day, and we take safeguarding our community’s data security extremely seriously. In November of 2025, we experienced a security incident that was quickly contained.”
“Subsequent investigation found that it primarily involved outdated source code and a limited amount of information associated with certain users, although we want to reassure our community that we do not store their full payment card information or collect bank account details,” they added.
“We also hired a third-party cybersecurity expert to audit our initial findings,” the spokesperson concluded. “We know any security incident can be alarming. As Suno continues to grow, we are continuing to invest in our security program and the team behind it.”
The lawsuit includes claims of negligence, breach of implied contract, breach of the implied covenant of good faith and fair dealing, unjust enrichment, and declaratory judgement against Suno. It seeks damages estimated at over $5 million, as well as a court order requiring Suno to implement enhanced data security and to provide impacted members with at least ten years of credit monitoring services.