In a significant security incident, cybercriminals have accessed tens of millions of records from the AI music creator Suno and the gig work platform Paidwork. This breach was confirmed by the data breach notification service Have I Been Pwned (HIBP), highlighting an alarming compromise of user data and company resources.
Suno’s Data Breach Details
In November 2025, Suno was subjected to a cyberattack, which only recently became public knowledge. According to reports from 404 Media, the perpetrators managed to acquire both user data and the company’s source code. The breach exposed that Suno had been collecting music and podcast content from major platforms such as Deezer, YouTube, and Genius without authorization.
Following analysis by HIBP, it was revealed that approximately 55.3 million unique email addresses associated with Suno accounts were compromised. The breach also exposed other sensitive details, including phone numbers and thousands of Stripe payment records, with personal information such as names, addresses, and partial payment card details.
Extent of Paidwork Data Breach
Paidwork, a platform that facilitates small paid tasks, was targeted by hackers in March 2026. Recently, a threat actor released an 11 GB database reportedly taken from Paidwork’s servers, claiming it includes data from around 22 million users.
HIBP’s investigation of the leaked information identified 23.3 million unique email addresses, along with other critical data. This includes names, password hashes, physical addresses, dates of birth, phone numbers, bank account details, financial transactions, and user profiles.
Implications and Responses
SecurityWeek has approached both Suno and Paidwork for statements regarding these breaches, but responses are yet to be disclosed. The extent of the breaches highlights the pressing need for enhanced cybersecurity measures and user data protection, especially for platforms handling sensitive personal and financial information.
As these incidents unfold, they serve as a reminder of the vulnerabilities that companies face in the digital age and the importance of robust security protocols to safeguard user data. Stakeholders and users alike are advised to remain vigilant and take necessary precautions to protect their personal information.
