Hack suggests AI music generator Suno scraped YouTube for training data

AI music generator Suno has been subjected to a data breach, according to a report by 404 Media. The hacker involved claims to have accessed the company's source code, uncovering evidence that Suno scraped extensive audio data from YouTube, Deezer, and Genius for its artificial intelligence training.

Suno had previously acknowledged using "publicly available music files" from the open internet. The company has defended this practice under the doctrine of "fair use," a legal concept that is subject to interpretation and has become a point of contention in copyright law. Major record labels have filed lawsuits against Suno, accusing the company of violating laws such as the Digital Millennium Copyright Act (DMCA) and YouTube's terms of service.

This incident casts a shadow over other players in the AI music space. Udio, another AI music generator, has also faced accusations of scraping YouTube data for training purposes. Google, YouTube's parent company, is similarly facing allegations of copyright infringement related to its AI training data.

The hacker reportedly gained access to customer information, including email addresses, phone numbers, and partial credit card details. Suno has not notified its customers about the breach, which occurred in November 2025, describing it as a "limited security incident that was quickly contained."