Suno AI Music Generator Breached: Leaked Data Reveals Training on Scraped YouTube, Deezer, and Genius Content

Suno, the AI music generator currently facing litigation from major record labels, suffered a security breach in late 2025 that has only recently come to light, according to a report by 404 Media. Materials obtained by journalist Jason Koebler indicate that the company trained its models by scraping millions of songs and lyrics from YouTube, the French streaming platform Deezer, and the lyrics database Genius, as well as various stock music libraries and podcasts via RSS feeds. The revelation adds a layer of irony given Genius’s own history; the platform was previously accused of scraping the Web 1.0 database Original Hip-Hop Lyrics Archive to build its initial catalog.

In a statement, a Suno spokesperson acknowledged the incident: “In November of 2025, we determined that Suno had been the subject of a limited security incident that was quickly contained. At the time, we immediately conducted an investigation and verified that the incident primarily involved outdated source code that is no longer in use at Suno and that no sensitive personal information was compromised. Importantly, Suno does not have access to customers’ full credit card numbers in Stripe.”

While Suno has previously acknowledged training on publicly available music files and metadata, the specific platforms and the scale of data ingestion were not previously public knowledge. The hacker responsible told 404 Media they held no specific grudge against the company, stating simply, “I like to hack anything and everything.”

The breach arrives amid a broader industry conflict over the use of artificial intelligence in music creation. Suno is currently being sued for copyright infringement by Sony Music Entertainment and Universal Music Group; Warner Records, an original plaintiff, withdrew from the suit to formalize a partnership with the startup. Producer Kenneth Blume, formerly known as Kenny Beats, recently criticized the company for allegedly using his work without consent. “To everyone who thought my music sounded like AI slop, did you ever think it was because Suno was using a dataset that contained 22 of my songs?” Blume wrote. “It’s funny how there were no accusations of my music sounding like AI slop until these datasets started getting used to generate slop.”

Source link