Back to all articles
•Technology

Data Breach Exposes Suno's Alleged Copyright Violations in AI Music Training

View original source

The AI music generator Suno experienced a hack through a supply chain attack in November 2025. This breach allowed a hacker to access an employee’s credentials and subsequently revealed source code showing how Suno allegedly scraped music and audio from platforms such as YouTube Music, Deezer, Genius, stock music libraries, and podcast RSS feeds.

  • Suno's Training Practices: The company has previously stated that it uses "publicly available music files" under the fair use doctrine for AI training, which major record labels contest as illegal under DMCA for bypassing YouTube's data scraping protections.
  • Legal Context: Suno, unlike its competitor Udio, faces ongoing lawsuits from record labels over its AI training methodologies reportedly violating YouTube's terms of service.
  • Google's Parallel Issues: Google, the parent of YouTube, is similarly being sued by major book publishers over alleged copyright infringements for AI training.
  • Security Breach Details: The hacker also accessed Suno's customer data, including emails, phone numbers, and partial credit card information.
  • Response: Suno did not inform customers about the breach but claimed it was a "limited security incident that was quickly contained."

This incident raises significant concerns about data security and the ethical implications of AI training on potentially copyrighted material.