The artificial intelligence music generator, Suno, reportedly experienced a security breach, as detailed in a recent investigation by 404 Media.
The individual responsible for the hack informed the publication that they gained unauthorized access through a sophisticated supply chain attack, compromising an employee’s credentials. This access subsequently provided them with Suno’s source code, which allegedly revealed methods used to scrape extensive audio data—spanning decades—from platforms such as YouTube Music, Deezer, Genius, various stock music libraries, and podcast RSS feeds.
Suno had previously acknowledged training its AI models on "publicly available music files" found across the internet, asserting that such use of copyrighted material falls under the fair use doctrine, a nuanced exception within copyright law. However, major record labels, currently engaged in litigation against Suno, contend that deliberately bypassing YouTube’s data scraping protections is illegal under the Digital Millennium Copyright Act (DMCA) and also constitutes a violation of YouTube’s terms of service.
This incident is not isolated, as Udio, a direct competitor to Suno, also faces accusations of scraping data from YouTube. Furthermore, Google, the parent company of YouTube, is grappling with similar allegations of copyright infringement brought forth by numerous major book publishers, highlighting a broader industry challenge.
The hacker reportedly managed to access sensitive customer information, including email addresses, phone numbers, and partial credit card details stored via Stripe.
Despite the breach, which reportedly occurred in November, Suno did not issue notifications to its customers. The company has since characterized the event as a “limited security incident that was quickly contained.”
The Editorial Staff at AIChief is a team of professional content writers with extensive experience in AI and marketing. Founded in 2025, AIChief has quickly grown into the largest free AI resource hub in the industry.