AI Music Startup Suno's Source Code Leak Reveals Unauthorized YouTube Scraping ...

Evidence that artificial intelligence music generation startup Suno systematically collected massive amounts of music from YouTube and other platforms without authorization for training data has surfaced following a hacking incident. According to reports from TechCrunch and other major outlets on the 15th (local time), a hacker who gained access to Suno's internal source code through a supply chain attack discovered records of illegal collection spanning decades of audio data.

This incident is expected to further intensify the legal and ethical conflict between the music industry and technology companies over the legality of data collection methods for AI training. Suno, already facing copyright infringement lawsuits from major record labels, now confronts significantly heightened legal risk due to this leak.

The incident, first reported by 404 Media, began when a hacker obtained Suno employee account credentials through a supply chain attack. The hacker used these accounts to access Suno's source code, claiming to have secured records detailing the origins of the vast dataset used to train the company's AI music models.

The source code contained traces of large-scale audio data collection from YouTube Music, music streaming service Deezer, lyrics platform Genius, stock music libraries, and podcast RSS feeds. This goes beyond Suno's stance of merely using publicly available music on the internet for AI model training, instead suggesting organized scraping from specific platforms.

Suno has acknowledged using "publicly available music files" for training but has maintained that using copyrighted material is permissible under the "fair use" doctrine of copyright law. However, observers note that the specific data collection methods revealed by this leak could significantly weaken its existing legal defense strategy.

Suno's competitor Udio is also suspected of unauthorized YouTube data collection. With the possibility that similar data collection practices are widespread across the AI music generation industry, Google itself is also embroiled in copyright infringement allegations from major publishers. This demonstrates that the legal battle over AI training data collection and usage has emerged as a core industry-wide issue extending beyond any single company.

Another point of controversy in this case is that Suno failed to properly notify customers a security breach that occurred last November. The hacker claimed that the attack at the time provided access to customer emails, phone numbers, and partial credit card numbers stored with payment processor Stripe.

Suno responded by stating that "the security incident at the time was quickly contained" and described it as a "limited security incident." However, the failure to immediately disclose a breach involving customer personal information to authorities or users is a point of criticism regarding corporate transparency and trust.

Multiple legal battles over copyright are already underway amid the rapid advancement of AI music generation technology. Major record labels are seeking substantial damages, alleging that AI companies used their extensive music catalogs for training without permission.

Industry experts anticipate this incident could be a major watershed moment capable of reshaping the AI music generation landscape. If courts side with the record labels, AI companies will inevitably need to enter licensing agreements with labels to secure legal data access, which could lead to increased service costs and market restructuring.

The clash between AI and copyright is expanding beyond the music industry into all creative domains, including images, video, and text. The outcome of the Suno case is expected to set an important precedent that will influence the trajectory of similar lawsuits in the future.

Once added, BigGo Finance appears first in Google Top Stories, so you get the broadest, most up-to-the-minute, and most comprehensive global financial news first.