AI Music Generator Suno Embroiled in Data Scraping Controversy
A recent report by 404 Media has shed light on a potential security breach at AI music generator Suno, which has been accused of scraping decades of audio data from various platforms, including YouTube Music, Deezer, Genius, stock music libraries, and podcast RSS feeds.
According to the report, a hacker gained access to an employee’s credentials in November 2025, allowing them to access the source code and allegedly confirm that Suno scraped copyrighted music from the mentioned platforms. The hacker claimed to have used a supply chain attack to gain access to the employee’s credentials.
Suno has previously admitted to training its AI on publicly available music files on the open internet. However, the company has argued that it can train on copyrighted material under the fair use doctrine, a subjective carve-out of copyright law. However, major record labels have actively sued Suno, stating that it is illegal under the Digital Millennium Copyright Act (DMCA) to deliberately circumvent YouTube’s protections against data scraping and that it also violates YouTube’s terms of service.
The hacker reportedly accessed customer data, including customer emails, phone numbers, and partial credit card numbers stored in Stripe. Suno has claimed that the breach was a ‘limited security incident that was quickly contained’ and failed to notify customers about the incident.
This is not the first time that Suno has faced allegations of copyright infringement. Udio, a competitor to Suno, has also been accused of scraping YouTube data. Google, the parent company of YouTube, faces similar allegations of copyright infringement from various major book publishers.
The controversy surrounding Suno’s data scraping practices raises questions about the ethics of AI music generation and the need for stricter regulations to protect copyrighted material. As AI technology continues to evolve, it is essential to address the concerns surrounding data scraping and copyright infringement to ensure that artists and creators receive fair compensation for their work.
In the face of growing concerns, Suno must take immediate action to address the allegations and ensure that its AI music generator operates within the bounds of copyright law. This includes implementing robust security measures to prevent future breaches and being transparent about its data scraping practices.
