
Suno knew and said nothing
Bypass: Music Industry News for Independent Artists
Tuesday edition • 3 min read
55.3 Million Accounts Got Exposed, But Suno Said Nothing for Eight Months
What's Up
Suno's been hacked. Wait, wait. Don't celebrate just yet.
Yeah, the training data got exposed. But it's worse than that. 55.3 million accounts went with it. Names, addresses, emails, phone numbers, purchase history, and partial card info down to the expiry dates.
It happened last November. So why is Suno only talking about it now?
So What
Suno never told anyone. Didn't even send an email to affected users. 404 Media got the data from the hacker, nothing from Suno. Have I Been Pwned cataloged it, still nothing from Suno. They only commented after TechCrunch ran the story. Of course they did. Their investors probably read TechCrunch.
And that 55.3 million figure is probably right, since they didn't dispute it.
Now What
Maybe you just used Suno that one time because you were curious. Cool, no hate. Change your password, turn on two-factor, then check haveibeenpwned.com to see if your data got caught up in it.
Massachusetts Wants Scalpers to Eat It
What's Up
The Great Divide. No, we're not talking about Noah Kahan's new album.
Massachusetts proposed a new bill with probably the longest name ever, "An Act Relative to Closing the Great Divide Between Ticket Prices and Affordability." It's their way of telling scalpers to eat it.
So What
The bill caps resale at 110% of face value and resale platform fees at 10%. It's also banning speculative tickets or sites pretending they're officially affiliated with you.
It's already backed by Noah Kahan, Pixies, MGMT, Goose, Dropkick Murphys, Lake Street Dive, Guster, Killswitch Engage, and dozens more, plus NIVA, SAG-AFTRA, and the Future of Music Coalition. They said it best: "People who contribute nothing to live performance should not profit more than the artists, venues, crews, and workers who bring these shows to life."
Now What
Maine, Vermont, and DC already did it. New York and California are next up. Massachusettsans, cross your fingers for the final vote. Everywhere else, push your state to pick up your very own "Great Divide".
To Catch A Deepfake
What's Up
AI cloning is getting to the point where it's not even funny. TikTok doesn't seem to be laughing either. They're testing a new opt-in tool that'll scan the app for AI deepfakes and let you flag them. Looks like they're joining the "No Deepfakes Club" with YouTube.
So What
It's great that TikTok is fighting deepfakes, but uhh, you have to hand your government ID and live selfie over to Jumio. TikTok did say they don't keep the documents, but whether you want to make that trade is your call.
Now What
Only a handful of creators are the lab rats right now, so don't hold your breath waiting for your turn. Search your name every now and then, and flag anything that looks off.
While You Were Making Music…
📉 Patreon lays off 20% of its staff [maybe they should start a Patreon to keep the lights on]
Today's edition by Jordan F.
For indies who ship music, not excuses.
Related News & Guides

Instagram's shiny new button for old posts
Instagram added a replace audio feature letting users swap songs on existing posts while keeping all likes, comments, and reach. Spotify expanded its video ecosystem with a new pitching tool, over 100 video playlists worldwide, and a global music video chart currently in beta for 100,000 artists. SoundCloud acquired Nina Protocol, where 77% of roughly 37,000 listings went uncollected and total lifetime spend across the platform reached approximately $50,000.

Fakes are outstreaming real bands
Mexican pop artist Nathan Bank sold out his first headline show in Mexico City by turning his ticket link into a fan matchmaking game that generated 4,100 comments. Google Alerts offers independent artists a free tool to monitor their name online and catch unauthorized listings or misspellings in real time. Philly folk duo Makeshift Hammer had their entire album pitch-shifted and re-uploaded on Spotify as a fake artist, with the counterfeit tracks pulling 50,000 plays per track versus their own 1,000 to 2,000.