The AI music generator Suno was hacked, based on a report from 404 Media.
The hacker advised the publication that they used a provide chain assault to entry an worker’s credentials, permitting them to then entry supply code exhibiting how Suno allegedly scraped many years of audio from YouTube Music, Deezer, Genius, inventory music libraries, and podcast RSS feeds.
Suno beforehand admitted that it trains its AI on “publicly out there music recordsdata” on the open web, arguing that it will probably practice on copyrighted materials underneath the honest use doctrine, a subjective carve out of copyright regulation. However based on the foremost document labels actively suing Suno, it’s illegal underneath the Digital Millennium Copyright Act (DMCA) to intentionally circumvent YouTube’s protections towards knowledge scraping; it additionally violates YouTube’s phrases of service.
Udio, a competitor to Suno, has additionally been accused of scraping YouTube knowledge. Google, the mum or dad firm of YouTube, faces related allegations of copyright infringement from quite a lot of main guide publishers.
The hacker reportedly accessed buyer knowledge together with customer emails, phone numbers, and partial bank card numbers in Stripe.
Suno didn’t notify prospects concerning the November 2025 breach and claims that this was a “restricted safety incident that was shortly contained.”
