Alleged Suno breach points to YouTube Music scraping
Developed over time first seen 2 months ago
A hack of AI music generator Suno has surfaced evidence, according to a report by 404 Media, that the company scraped years of audio from YouTube Music and other platforms to train its system, deepening the legal and ethical questions already surrounding it. The episode matters because Suno is fighting lawsuits from major record labels over its use of copyrighted material, having defended its approach by invoking fair use, while the alleged scraping of YouTube specifically may also breach the Digital Millennium Copyright Act and YouTube's terms of service.
The hacker said they exploited a supply-chain attack in November 2025 to obtain an employee's credentials, then accessed source code allegedly showing scraping from YouTube Music, Deezer, Genius, stock music libraries and podcast RSS feeds over many years, alongside customer data including emails, phone numbers and partial Stripe card details. Suno, which has previously said it trains on "publicly available music files", did not notify customers at the time and has described the breach as a "limited security incident that was quickly contained." Rival Udio faces similar scraping allegations, while YouTube's parent Google is separately being sued by major book publishers over AI training data.
- Hacker claims to have found evidence Suno scraped YouTube Music for AI training.
- Breach also exposed customer emails, phone numbers and partial card details.
- Suno faces label lawsuits; didn't disclose the November 2025 breach at the time.
New here? Start with this
Suno is a company that makes artificial intelligence tools which can generate music from written prompts. Like other AI systems, it needs large amounts of existing material to learn patterns in sound, lyrics and musical styles.
Record labels have sued Suno, arguing that its technology was trained using copyrighted recordings without permission. Suno has said its use of publicly available music can be protected by fair use, a legal principle that can allow limited use of copyrighted work in some circumstances.
YouTube Music is Google’s music-streaming service, containing recordings supplied by labels and artists. If music or related material was collected from it without permission, the issues could extend beyond copyright to the platform’s rules and US laws governing access to protected digital systems.
More coverage
AI Cybersecurity Entertainment Music Technology Trending Weird & Viral
Read the full article at the source →
Originally published by TechCrunch as “Hack suggests AI music generator Suno scraped YouTube for training data”.