Suno AI Music Generator Breached, Exposing Source Code and Customer Data

Suno, an AI music generator, was hacked, exposing its source code and customer data. The hacker employed a supply chain attack to access an employee's credentials, revealing that Suno scraped millions of songs from platforms like YouTube Music, Deezer, and Genius. The breach has raised significant concerns regarding copyright infringement and the legality of AI training practices. Customer data accessed includes email addresses, phone numbers, and partial credit card information. Suno did not inform customers about the breach, which occurred in November 2025, claiming it was a limited incident that was quickly contained. The incident has prompted discussions about the need for clearer regulations on AI training and copyright issues. Competitors like Udio are also implicated in similar data scraping practices, leading to broader industry scrutiny.

Key Points: • Suno was hacked via a supply chain attack, exposing its source code and customer data. • The breach revealed that Suno scraped millions of songs from various platforms for AI training. • Suno did not notify customers about the breach, which included sensitive personal information.