Suno, the contentious AI music generator that is currently being sued by two major labels, has been hacked, reports 404 Media. The breach occurred in late 2025 but wasn’t revealed until now. In addition to potential payment and user information, leaked materials shared with writer Jason Koebler show Suno reportedly trained its model by scraping millions of songs and lyrics from YouTube, several stock music libraries, the French streaming service Deezer, and Genius. (In perhaps a fitting example of history repeating itself, Genius was once accused of scraping the Web 1.0 database Original Hip-Hop Lyrics Archive to start its own catalog.)
In a statement, a Suno spokesperson said, “In November of 2025, we determined that Suno had been the subject of a limited security incident that was quickly contained. At the time, we immediately conducted an investigation and verified that the incident primarily involved outdated source code that is no longer in use at Suno and that no sensitive personal information was compromised. Importantly, Suno does not have access to customers’ full credit card numbers in Stripe.”
While Suno has previously admitted its model was trained on publicly available music files and metadata, what platforms it used and how extensive it used them was not previously known. In an interview with 404, the hacker told the outlet he didn’t have any particular motivation for going after Suno. “I like to hack anything and everything,” they said.
Suno is just one of a number of AI music tools that have been at the center of a wide-ranging debate on the continued use of artificial intelligence in recording music. Suno is currently being sued for copyright infringement by Sony and Universal Music Group (former plaintiff Warner Records dropped out of the lawsuit to sign an official partnership with the company).
Kenneth Blume, fka as Kenny Beats, recently criticized Suno for using his music to train its models without permission: “To everyone who thought my music sounded like AI slop, did you ever think it was because Suno was using a dataset that contained 22 of my songs? It’s funny how there were no accusations of my music sounding like AI slop until these datasets started getting used to generate slop.”
