Report links Suno hack to alleged YouTube audio scraping

In short: A report says a hacker got into Suno’s systems and claims the company collected audio from YouTube and other sources to train its AI music tool.

What happened

TechCrunch reports, citing 404 Media, that AI music generator Suno was hacked. The hacker said they used a “supply chain attack,” which means they got in by targeting something Suno depends on, not Suno directly (like getting a spare key from a third party).

The hacker told 404 Media that they used an employee’s login details to access Suno’s source code, which is the underlying instructions that make the app work. The hacker claims the code showed how Suno collected, or “scraped,” large amounts of audio over many years from places like YouTube Music, Deezer, Genius, stock music libraries, and podcast feeds (scraping is like copying lots of information from a website automatically).

Suno has previously said it trains its AI on “publicly available music files” and argues that training on copyrighted material can be allowed under fair use, which is a legal exception that depends on the situation. Major record labels are already suing Suno, and they argue that pulling audio from YouTube by getting around YouTube’s protections would break the DMCA, a US copyright law, and also violate YouTube’s rules.

The report also says the hacker accessed customer data, including customer emails, phone numbers, and partial credit card numbers stored in Stripe, a payments service. Suno reportedly did not notify customers about a November 2025 breach and described it as limited and quickly contained.

Why it matters

If these claims are confirmed, this could affect creators and listeners in two ways. It could shape what AI music tools are allowed to learn from, and it could raise concerns about how companies protect customer information.

Source: TechCrunch AI