Technology news and discussion on TalkFuse.
Alleged Suno breach points to YouTube Music scraping
Developed over time first seen 4 months ago
A hack of AI music generator Suno has surfaced evidence, according to a report by 404 Media, that the company scraped years of audio from YouTube Music and other platforms to train its system, deepening the legal and ethical questions already surrounding it. The episode matters because Suno is fighting lawsuits from major record labels over its use of copyrighted material, having defended its approach by invoking fair use, while the alleged scraping of YouTube specifically may also breach the Digital Millennium Copyright Act and YouTube's terms of service.
The hacker said they exploited a supply-chain attack in November 2025 to obtain an employee's credentials, then accessed source code allegedly showing scraping from YouTube Music, Deezer, Genius, stock music libraries and podcast RSS feeds over many years, alongside customer data including emails, phone numbers and partial Stripe card details. Suno, which has previously said it trains on "publicly available music files", did not notify customers at the time and has described the breach as a "limited security incident that was quickly contained." Rival Udio faces similar scraping allegations, while YouTube's parent Google is separately being sued by major book publishers over AI training data.
- Sources
- 2
- Outlets
- 2
- Left · Centre · Right
- 0 · 0 · 0
In short
- Hacker claims to have found evidence Suno scraped YouTube Music for AI training.
- Breach also exposed customer emails, phone numbers and partial card details.
- Suno faces label lawsuits; didn't disclose the November 2025 breach at the time.
How this story developed
- 4 months ago Follow-up coverage reiterated the hacked source code's implications, noting record labels now argue the alleged bypassing of YouTube's anti-scraping protections would itself violate the DMCA and YouTube's terms, sharpening the legal exposure facing Suno and rival Udio beyond the original fair-use defence.
- 4 months ago A hack of AI music generator Suno exposed alleged source code showing years of scraping from YouTube Music, Deezer, Genius, stock libraries and podcasts, using a November 2025 supply-chain breach that also compromised customer emails, phone numbers and partial card details, feeding into existing copyright lawsuits from major record labels.
Steelman: both sides, in good faith
The strongest fair case each way — we don't pick a winner.
The case for
Those supporting AI training on scraped data contend that fair use protects learning from publicly available sources for transformative purposes, much as it has historically permitted researchers. Suno obtained music from YouTube Music as a legitimate public source, and such training drives innovation that benefits society broadly. The principle is that learning from existing works, whether for human artists or AI systems, represents transformative use protected under established copyright doctrine.
The case against
Critics argue that scraping without artist consent fundamentally violates copyright and fair use principles, regardless of technical availability. They emphasise that YouTube's terms of service likely forbid automated scraping, that the DMCA may apply, and that commercial entities should pay for rights rather than exploit works freely. The apparent lack of transparency about scraping sources suggests Suno recognises the ethical problems even while defending legality—copyright law exists to prevent exactly this kind of unauthorised commercial exploitation.
Explained simply
Suno is a company that makes artificial intelligence tools which can generate music from written prompts. Like other AI systems, it needs large amounts of existing material to learn patterns in sound, lyrics and musical styles.
Record labels have sued Suno, arguing that its technology was trained using copyrighted recordings without permission. Suno has said its use of publicly available music can be protected by fair use, a legal principle that can allow limited use of copyrighted work in some circumstances.
YouTube Music is Google’s music-streaming service, containing recordings supplied by labels and artists. If music or related material was collected from it without permission, the issues could extend beyond copyright to the platform’s rules and US laws governing access to protected digital systems.
Coverage · 2 sources
AI Cybersecurity Entertainment Music Technology Trending Weird & Viral
Read the full article at the source →
Originally published by TechCrunch as “Hack suggests AI music generator Suno scraped YouTube for training data”.