Hack suggests that AI music creator Suno scraped YouTube to obtain training data

AI music generator Suno has been hacked, according to a report by 404 media.

The hacker told the publication that they used a supply chain attack to access employee credentials, which then allowed them to access source code showing how Suno scraped decades of audio from YouTube Music, Deezer, Genius, stored music libraries, and podcast RSS feeds.

Formerly Sono I confess It trains its AI on “publicly available music files” on the open Internet, arguing that it can train on copyrighted material under the doctrine of fair use, a self-proclaimed carve-out of copyright law. But according to major record labels actively prosecution Sonu, it is illegal Under the Digital Millennium Copyright Act (DMCA) to intentionally circumvent YouTube’s data theft protections; It also violates YouTube’s terms of service.

Sharea competitor to Suno, has also been accused of copying YouTube data. Google, YouTube’s parent company, faces similar allegations Copyright infringement From a variety of major book publishers.

The hacker reportedly gained access to customer data including Customer email addresses and phone numbersAnd partial credit card numbers in Stripe.

Suno did not notify customers about the hack that occurred in November 2025, and claims this was a “limited security incident that was quickly contained.”