A supply chain worm stole one Suno engineer's login. Eight months later, 55 million accounts surfaced online.

In November 2025, Suno, the AI music generation platform founded in 2023 that lets users generate full songs from text prompts, detected an intrusion into its own systems. The company investigated, decided the exposure was limited to outdated source code, and concluded that individual notifications to customers were not required under applicable privacy law. Nobody outside Suno knew any of this had happened until July 2026, when a hacker using the handle ellie.191 published details of the breach to the journalism outlet 404 Media, and Troy Hunt's Have I Been Pwned service verified and listed the stolen dataset.

The attacker reportedly got in by compromising a single Suno employee's credentials through the Shai-Hulud worm, a self-propagating supply chain attack that spread through poisoned npm packages earlier in 2025 and harvested GitHub and cloud service credentials from every developer machine it touched. Once ellie.191 held that one employee's login, no further check stood between it and Suno's internal environment. They claim to have reached the company's source code repositories, its internal training datasets, and its customer records, all through the same compromised credential.

From the source code, the attacker pulled evidence of how Suno had assembled the datasets behind its AI models: large-scale scraping of music, lyrics and audio from YouTube Music, Deezer, Genius, Pond5, Jamendo, Freesound, the International Music Score Library Project and podcast RSS feeds. From the customer records, they pulled a list containing tens of thousands of Stripe payment entries and a much larger set of registration data. Both caches left Suno's systems through the same door: one login, harvested by malware, that nothing downstream asked to see confirmed again.

When Have I Been Pwned verified the dataset in July 2026, it counted 55.3 million unique email addresses, along with names, phone numbers, physical addresses, purchase amounts, and partial card details including card type, expiry date and the last four digits, for some customers. Nearly a quarter of those email addresses were already sitting in HIBP's records from earlier, unrelated breaches, meaning millions of the same people are now cycling through yet another exposure of their identity. Suno disputes the scale of what happened, telling 404 Media that the incident involved only outdated, unused source code and that no sensitive personal information was compromised, a position that sits uneasily next to a verified dataset naming 55 million real accounts. The Shai-Hulud worm that opened the door has resurfaced across the JavaScript ecosystem more than once this year, hitting other companies through the same mechanism: one compromised developer machine, one set of harvested credentials, and a straight path to whatever those credentials could reach.

Suno detected the intrusion and moved to contain it, which is more than many breached companies manage. What it did not have was a control that stopped one compromised developer credential from reaching a production customer database and a full source code repository in the first place. Once the worm had the login, the login was all it needed. Nothing in Suno's environment asked whether the person behind that credential was actually authorised to pull tens of millions of records out the door.

Exporting a customer database or a source code repository at that scale is an execution event. Before a credential, harvested or otherwise, can trigger an export of that size from a production system, GoFirm sends a real-time push notification to the named systems owner on their registered device, requiring biometric confirmation before the export is allowed to proceed. No confirmation, no export. The control sits at the moment the action would execute, not in the audit log that gets read after the data is already gone.

A credential harvested by a supply chain worm, however valid it appears to the system granting access, cannot produce that confirmation on the real owner's registered device. The execution boundary holds regardless of how the access was obtained.

GoFirm is The Authority Platform. Stop unauthorised action. Every time.

In association with Osinto.ai, the collective intelligence platform for Security, Resilience & Defence. Osinto's AI-enabled open-source network and governed collaborative operational environment help mitigate the growing security, resilience and governance obligation in seconds, not days.

References

1. Mous, A. 2026. Data breach at Suno affects over 55 million users. Cybernews, 22 July 2026.
2. Ćemanović, A. 2026. Data breach at AI music service Suno exposed 55 million accounts. CyberInsider, 21 July 2026.