Hackers breached two platforms, Suno and Paidwork, stealing tens of millions of records. Suno's breach included source code and user data such as 55.3 million unique email addresses, phone numbers, and partial Stripe payment records. Paidwork's breach involved an 11 GB database leak containing approximately 23.3 million unique email addresses, password hashes, physical addresses, dates of birth, phone numbers, bank account numbers, financial transactions, and user profiles. The breaches were publicly reported by Have I Been Pwned and SecurityWeek, with no vendor advisories or patches indicated.

The breaches exposed large volumes of sensitive personal and financial information, increasing the risk of identity theft, financial fraud, and credential stuffing attacks against affected users. The exposure of password hashes may enable attackers to attempt password cracking. The leak of partial payment card and bank account information poses a risk of financial fraud. The stolen source code from Suno may also have intellectual property implications. No evidence of active exploitation in the wild has been reported.

No official patches or vendor advisories have been provided regarding these breaches. Organizations and users affected should monitor for suspicious activity and consider changing passwords and reviewing financial statements. Users should be cautious of phishing attempts leveraging the leaked data. Since this is a data breach rather than a software vulnerability, remediation involves incident response and user notification rather than patching software.