AI Music Generator Suno Exposed in High-Profile Hacking Incident

Major Hacking Incident Raises Questions About AI Training Methods and Copyright Infringement

A recent report from 404 Media has revealed that Suno, an AI music generator, was hacked in a supply chain attack. The hacker used the compromised credentials to access Suno's source code, exposing the platform's alleged scraping of decades of audio from various sources.

According to the report, Suno trains its AI on "publicly available music files" on the open internet, relying on the fair use doctrine to justify its actions. However, major record labels have actively sued Suno, claiming that it is illegal under the Digital Millennium Copyright Act (DMCA) to deliberately circumvent YouTube's protections against data scraping.

Suno's competitor, Udio, has also been accused of scraping YouTube data, while Google, the parent company of YouTube, faces similar allegations of copyright infringement from major book publishers.

The hacking incident also compromised customer data, including emails, phone numbers, and partial credit card numbers in Stripe. Suno failed to notify customers about the November 2025 breach, claiming that it was a "limited security incident that was quickly contained".

The incident highlights the risks associated with AI training methods and the importance of ensuring the integrity of source code and customer data.