Hack suggests AI music generator Suno scraped YouTube for training data
News Source
β’Wed, 15 Jul 2026 17:00:34 +0000
π° What Happened
AI music generator Suno was hacked via a supply chain attack, with the hacker accessing source code that allegedly shows Suno scraped decades of audio from YouTube Music, Deezer, Genius, and podcast RSS feeds for training data. The hacker also accessed customer data including emails, phone numbers, and partial credit card numbers from a November 2025 breach that Suno never disclosed to customers.
π The Backstory
Suno has previously admitted to training its AI on publicly available music files, arguing it can use copyrighted material under the fair use doctrine. Major record labels are actively suing Suno, claiming it illegally circumvented YouTube's anti-scraping protections in violation of the DMCA and YouTube's terms of service. Competitor Udio faces similar allegations. Google (YouTube's parent) also faces copyright infringement allegations from book publishers. The November 2025 breach was reportedly 'quickly contained' according to Suno, but the company did not notify affected customers. The newly revealed hack provides evidence that could strengthen the record labels' case by showing deliberate circumvention of technical protections.
π― Why It Matters
This case is at the center of the debate over whether AI training on copyrighted content constitutes fair use or theft. If Suno is found to have deliberately circumvented YouTube's technical protections, it could set a legal precedent that undermines the fair use defense for AI training. The undisclosed data breach also raises serious questions about Suno's security practices and transparency.
AI music generator Suno was hacked via a supply chain attack, with the hacker accessing source code that allegedly shows Suno scraped decades of audio from YouTube Music, Deezer, Genius, and podcast RSS feeds for training data. The hacker also accessed customer data including emails, phone numbers, and partial credit card numbers from a November 2025 breach that Suno never disclosed to customers.
Suno has previously admitted to training its AI on publicly available music files, arguing it can use copyrighted material under the fair use doctrine. Major record labels are actively suing Suno, claiming it illegally circumvented YouTube's anti-scraping protections in violation of the DMCA and YouTube's terms of service. Competitor Udio faces similar allegations. Google (YouTube's parent) also faces copyright infringement allegations from book publishers. The November 2025 breach was reportedly 'quickly contained' according to Suno, but the company did not notify affected customers. The newly revealed hack provides evidence that could strengthen the record labels' case by showing deliberate circumvention of technical protections.
This case is at the center of the debate over whether AI training on copyrighted content constitutes fair use or theft. If Suno is found to have deliberately circumvented YouTube's technical protections, it could set a legal precedent that undermines the fair use defense for AI training. The undisclosed data breach also raises serious questions about Suno's security practices and transparency.