Suno Hack Exposes Scraping of Millions of YouTube Songs
Quick Reads
- A hacker breached Suno’s systems and leaked source code detailing its AI training methods.
- The leaked data reveals scraping from YouTube Music, Deezer, Genius, and several stock libraries.
- Suno also exposed customer emails, phone numbers, and partial Stripe payment details in the breach.
- The hack lands amid an active RIAA lawsuit accusing Suno of stream-ripping copyrighted music.
- Suno confirmed the breach occurred in November and called it a contained security incident.
Suno hack exposes scraping details that the AI music company had long tried to keep quiet. A hacker breached Suno’s systems and shared internal source code with 404 Media, revealing exactly how the platform built its training library.
According to the leaked files, Suno pulled millions of tracks from YouTube Music, Deezer, and Genius. It also scraped stock libraries like Pond5 and Jamendo, plus roughly a million hours of podcast audio.
The hacker reportedly used a supply-chain attack to steal an employee’s credentials first. From there, they accessed source code dating back to 2023 and 2024. Beyond training data, the breach exposed customer emails, phone numbers, and partial Stripe card details. Suno never notified affected users, and it later called the incident “quickly contained.”
However, the timing could not be worse for the company. Record labels are currently suing Suno for allegedly circumventing YouTube’s anti-scraping protections. That practice, known as stream-ripping, violates the Digital Millennium Copyright Act. The leaked code appears to confirm claims the RIAA has made in court for months.
Meanwhile, Suno maintains that its training data comes from publicly available sources across the open internet. Still, the hack turns a legal argument into documented evidence overnight. For an industry already nervous about AI training practices, this breach adds real weight to the debate.
