Hack suggests AI music generator Suno scraped YouTube for training data

<p id="speakable-summary" class="wp-block-paragraph">The AI music generator Suno was hacked, according to a report from <a href="https://www.404media.co/hack-reveals-suno-ai-music-generator-scraped-youtube-deezer-and-genius/" target="_blank" rel="noreferrer noopener nofollow">404 Media</a>.</p>
<p class="wp-block-paragraph">The hacker told the publication that they used a supply chain attack to access an employee’s credentials, allowing them to then access source code showing how Suno allegedly scraped decades of audio from YouTube Music, Deezer, Genius, stock music libraries, and podcast RSS feeds.</p>
<p class="wp-block-paragraph">Suno previously <a href="https://help.suno.com/en/articles/9709569?ref=404media.co" target="_blank" rel="noreferrer noopener nofollow">admitted</a> that it trains its AI on “publicly available music files” on the open internet, arguing that it can train on copyrighted material under the fair use doctrine, a subjective carve-out of copyright law. But according to the major record labels actively <a href="https://techcrunch.com/2026/06/03/still-facing-copyright-lawsuits-ai-music-generator-suno-raises-another-400m/">suing</a> Suno, it is <a href="https://www.theverge.com/news/782448/riaa-suno-ai-lawsuit-update-stream-ripping-youtube?ref=404media.co" target="_blank" rel="noreferrer noopener nofollow">illegal</a> under the Digital Millennium Copyright Act (DMCA) to deliberately circumvent YouTube’s protections against data scraping; it also violates YouTube’s terms of service.</p>
<p class="wp-block-paragraph"><a href="https://www.musicbusinessworldwide.com/udio-admits-to-scraping-youtube-audio-for-ai-training-in-answer-to-sony-music-lawsuit/" target="_blank" rel="noreferrer noopener nofollow">Udio</a>, a competitor to Suno, has also been accused of scraping YouTube data. Google, the parent company of YouTube, faces similar allegations of <a href="https://techcrunch.com/2026/07/14/google-faces-another-ai-training-lawsuit-from-major-publishers/">copyright infringement</a> from a variety of major book publishers.</p>
<p class="wp-block-paragraph">The hacker reportedly accessed customer data including <a href="https://bsky.app/profile/jasonkoebler.bsky.social/post/3mqovexnuj22h" target="_blank" rel="noreferrer noopener nofollow">customer emails, phone numbers</a>, and partial credit card numbers in Stripe.</p>
<p class="wp-block-paragraph">Suno did not notify customers about the November 2025 breach and claims that this was a “limited security incident that was quickly contained.”</p>