Suno Data Breach Exposes 55 Million Users as Hack Reveals YouTube Music Scraping Operations
10 Sources
[1]
AI music generator Suno breach affects 55M users, per Have I Been Pwned
A cyberattack at AI music generator Suno last year allowed a hacker to steal the personal information of more than 55.3 million people, according to the data breach notification service Have I Been Pwned, offering the first glimpse into the scale of the data theft. Per Have I Been Pwned, which
[2]
Hack suggests AI music generator Suno scraped YouTube for training data
The AI music generator Suno was hacked, according to a report from 404 Media. The hacker told the publication that they used a supply chain attack to access an employee's credentials, allowing them to then access source code showing how Suno allegedly scraped decades of audio from YouTube Music,
[3]
Source Code Hack Reveals Suno's AI Was Trained on Millions of YouTube Songs
Musicians, streaming services and record labels have been claiming for years that AI music services use their vast collections of human-created music to build their artificial intelligence tools. Now we have a clearer picture of how Suno, an AI company that helps people create AI audio clips and
[4]
Suno snatched millions of songs from YouTube, Genius, and Deezer
Suno data obtained in a hacking incident has exposed that the AI music generator was trained by scraping millions of songs and lyrics from online audio platforms, including YouTube Music, Deezer, and Genius, 404 Media reports. Given that Suno has avoided revealing what's in its training datasets
[5]
AI music platform Suno hits bum note as 55M users exposed in data breach, claims infosec expert
A data breach at AI music generator platform Suno exposed more than 55 million user accounts, according to Troy Hunt's Have I Been Pwned service, which ingested the files. The dump consisted mostly of email addresses, although phone numbers were also included where users had signed up with them
[6]
A hacker accessed Suno source code that reportedly details how the company scraped millions of songs - Engadget
The company says it was breached in November and "no sensitive personal information was compromised." Suno -- an app that vomits out soulless audio in the form of AI-generated "music" -- has been hacked. According to 404 Media, the hacker accessed data related to Suno's training practices, as well
[7]
AI Music App Suno Got Hacked, Giving a Glimpse of Just How Much Music It Scraped
AI models tend to be black boxes, but it seems they do become a little less opaque if you forcibly crack them open. According to a report from 404 Media, a hacker who allegedly breached AI music generation platform Suno back in November 2025 was able to get a peek into the trove of training data
[8]
Suno AI music was trained on 2M+ scraped YouTube songs
A hack of Suno AI music exposed its source code, showing it scraped millions of songs from YouTube, Deezer, and Genius to train its song generator. For years, musicians have said AI song generators fed on their work without asking. A hacker just opened the black box and showed them exactly
[9]
Hack Reveals Suno AI Music Generator Scraped YouTube, Deezer, and Genius
Hacked source code reveals how Suno scraped decades worth of music and podcasts from the internet to train its AI tool. The AI music generation tool Suno scraped millions of songs and lyrics from YouTube Music, Deezer, and Genius, as well as from the stock music libraries Pond5, Jamendo,
[10]
AI music generator Suno has been hacked, detailing the data scraping of millions of songs from YouTube, Deezer, and Genius
According to 404 Media, a hacker has breached the company database of Suno, an online AI music generation tool. The hack is said to reveal multiple references to the training data it scraped from YouTube Music, Deezer, Genius, and others. Suno has previously admitted that its tool was trained on
Share
Copy Link
AI music generator Suno suffered a cyberattack in November 2025 that exposed personal data of over 55 million users, including email addresses, phone numbers, and partial payment card details. The breach also revealed source code showing how Suno allegedly scraped millions of songs from YouTube Music, Deezer, and Genius to train its AI models—fueling ongoing copyright lawsuits from major record labels.
Massive Data Breach Affects 55 Million Suno Users
The AI music generator Suno experienced a significant data breach in November 2025 that compromised the personal information of more than 55.3 million users, according to Have I Been Pwned, the data breach notification service run by security researcher Troy Hunt
1
. The cyberattack, which remained undisclosed by the company for months, only came to light through reporting by 404 Media2
.
Source: CNET
The stolen user data included names, physical addresses, email addresses, phone numbers, purchase records, and partial payment card numbers extracted from the company's Stripe account, including card expiry dates
1
. Tens of thousands of Stripe payment data records were compromised, revealing purchase amounts and the last four digits of credit card numbers5
. Despite the scale of the incident, Suno has not publicly disclosed the cyberattack or notified affected individuals that their information was taken1
.Suno Source Code Hack Exposes AI Training Methods
The breach extended beyond user data. A hacker identifying as "ellie.191" used a supply chain attack to access an employee's credentials, subsequently obtaining source code that revealed how the Suno AI music generator allegedly scraped decades of audio from multiple platforms
2
. The leaked materials included Suno source code from 2023 and 2024, alongside scraping instructions to pull audio files from YouTube Music, Deezer, Genius, Pond5, Jamendo, Freesound, and the International Music Score Library Project4
.
Source: Gizmodo
One file showed that Suno had consumed over 2 million clips in a folder labeled "youtube_music" at the time it was last updated
3
. Additional files revealed that datasets compiled by Suno included more than 17,000 hours of music from Genius HQ, over 12,000 hours from streaming service Deezer, and more than 62,000 hours from Pond5, a Shutterstock-owned stock music site3
. The leaked code also suggests Suno used a third-party company called Bright Data to scrape music from YouTube, and actively searched for acapella versions of songs to source vocal-only audio4
. Suno reportedly sought to download roughly 1 million hours of podcasts via an online tool called PodcastIndex4
.Copyright Infringement Lawsuits Gain New Evidence
The hack seemingly validates allegations in copyright infringement lawsuits brought against Suno by major record labels
3
. The Recording Industry Association of America filed suit on behalf of record labels including Universal Music Group, Sony Music Entertainment, and Warner Music Group, representing artists such as Bruce Springsteen, Beyoncé, Taylor Swift, and Dua Lipa5
.Suno previously admitted that it trains its AI on "publicly available music files" on the open internet, arguing that its use of copyrighted material falls under the fair use doctrine—a subjective carve-out of copyright law
2
. However, the record labels argue that it is illegal under the Digital Millennium Copyright Act to deliberately circumvent YouTube's protections against data scraping, and that such actions violate YouTube's terms of service2
. An amendment filed by the Recording Industry Association of America alleges that Suno unlawfully engaged in "stream ripping" tracks from the platform4
.While Warner Music Group has since settled its litigation with Suno and begun a commercial partnership with the AI company, Sony and Universal Music Group continue their claims in court
5
. Udio, a competitor to Suno, has also been accused of scraping YouTube data in similar lawsuits2
.Related Stories
Company Response Raises Questions About Transparency
Suno's response to the incident has been minimal. The company claims this was a "limited security incident that was quickly contained" and states it became aware of the breach in November 2025
2
. A Suno spokesperson told media outlets that the company immediately investigated and verified that the incident "primarily involved outdated source code that is no longer in use at Suno and that no sensitive personal information was compromised"3
.The company also denies having access to customers' full credit card numbers and concluded that under current privacy laws, it did not need to notify individual users
3
. However, customers contacted by 404 Media confirmed they had signed up for the service and said Suno never notified them about the security breach4
. Suno co-founder Mikey Shulman did not respond to requests for comment about the incident1
.
Source: TechCrunch
Implications for AI Training Data Practices
This breach offers a rare glimpse into how generative AI companies acquire and process AI training data, pulling back the curtain on practices that tech companies typically guard closely
3
. The incident highlights tensions between AI companies claiming to democratize creative access and human artists who say AI uses their work without permission to create cheap imitations. Even when record labels strike deals with AI companies, musicians report receiving no compensation for the use of their songs3
.The legal landscape remains uncertain. Like other AI companies, Suno is claiming its use of original material as training data is legal under fair use. Anthropic and Meta won similar lawsuits brought by authors claiming infringement last summer
3
. Whether courts will accept this argument when applied to music streaming platforms with explicit anti-scraping protections remains to be seen. The outcome of these cases could establish precedents that shape how AI companies source training materials across creative industries.References
Summarized by
Navi
Related Stories
Suno Introduces Audio Watermarking for AI-Generated Music Amid Legal Pressure
31 Jul 2026•Technology
Suno reaches 2 million subscribers as AI music generator battles copyright infringement claims
26 Feb 2026•Business and Economy
Suno Replaces AI Models With Licensed Music Training as Copyright Battles Continue
Today•Technology
Recent Highlights
1
OpenAI Launches Astra AI Model With Critical Cyber Abilities Amid Safety Debate
Technology
2
OpenAI Agents Escape Sandbox, Post 18,000 Messages on German Wiki to Share Hacking Techniques
Policy and Regulation
3
Anthropic AI Completes 10-Year Mathematical Proof Project in Just 11 Days Using Claude
Technology
Recent Highlights
Today's Top Stories
Don’t drown in AI news. We cut through the noise - filtering, ranking and summarizing the most important AI news, breakthroughs and research daily. Follow topics that matter to you and stay ahead.
