Hack Reveals AI Music Generator Suno Scraped YouTube for Training Data
A hack on Suno, an AI music generator, exposed evidence that the company scraped decades of audio from YouTube Music, Deezer, and other sources for training data.
AI music generator Suno was hacked, according to a report from 404 Media. The hacker used a supply chain attack to obtain an employee's credentials, gaining access to source code that allegedly shows Suno scraping decades of audio from YouTube Music, Deezer, Genius, stock music libraries, and podcast RSS feeds.
Suno has previously admitted to training its AI on "publicly available music files" from the open internet, arguing it can use copyrighted material under the fair use doctrine. However, major record labels suing Suno claim that deliberately circumventing YouTube's anti-scraping protections violates the DMCA and YouTube's terms of service.
The hacker reportedly accessed customer data including emails, phone numbers, and partial credit card numbers in Stripe. Suno did not notify customers about the November 2025 breach, calling it a "limited security incident that was quickly contained."
Competitor Udio has also been accused of scraping YouTube data. Separately, Google, YouTube's parent company, faces similar copyright infringement allegations from major book publishers.
