The AI music generator Suno was hacked, based on a report from 404 Media.
The hacker instructed the publication that they used a provide chain assault to entry an worker’s credentials, permitting them to then entry supply code exhibiting how Suno allegedly scraped many years of audio from YouTube Music, Deezer, Genius, inventory music libraries, and podcast RSS feeds.
Suno beforehand admitted that it trains its AI on “publicly accessible music recordsdata” on the open web, arguing that it may possibly prepare on copyrighted materials below the honest use doctrine, a subjective carve out of copyright legislation. However based on the main file labels actively suing Suno, it’s unlawful below the Digital Millennium Copyright Act (DMCA) to intentionally circumvent YouTube’s protections in opposition to knowledge scraping; it additionally violates YouTube’s phrases of service.
Udio, a competitor to Suno, has additionally been accused of scraping YouTube knowledge. Google, the mother or father firm of YouTube, faces comparable allegations of copyright infringement from a wide range of main e-book publishers.
The hacker reportedly accessed buyer knowledge together with buyer emails, telephone numbers, and partial bank card numbers in Stripe.
Suno didn’t notify clients concerning the November 2025 breach and claims that this was a “restricted safety incident that was rapidly contained.”
