5 days ago
The institution says it was breached successful November and "no delicate individual accusation was compromised."
bella1105/Shutterstock
Suno — an app that vomits retired soulless audio successful nan shape of AI-generated "music" — has been hacked. According to 404 Media, nan hacker accessed information related to Suno's training practices, arsenic good arsenic specifications connected its customers.
It's not precisely a concealed astatine this constituent that copyrighted euphony has been utilized for AI training. Last month, The Atlantic dug into datasets containing millions of songs that are utilized for specified purposes.
Still, this hack sheds immoderate much ray connected Suno's information vacuuming practices. Data nan hacker provided to 404 Media indicated that Suno scraped euphony and lyrics from nan likes of YouTube Music, Deezer and Genius, arsenic good arsenic banal euphony libraries. The institution whitethorn person utilized proxy services to scrape euphony from YouTube, including acapella versions of songs, per nan report. It appears Suno utilized RSS feeds to scrape hundreds of thousands of podcasts too.
Suno has faced a copyright infringement lawsuit from grounds labels successful nan US. Late past year, Warner Music Group dropped retired of nan case as it reached a licensing woody pinch Suno. Back successful 2024, Suno admitted successful a tribunal filing that its systems scraped "tens of millions of recordings" from nan net to usage arsenic training data, arguing that its attack constituted "fair usage nether copyright law."
To get nan data, nan hacker said they deed a Suno worker pinch a worm that allowed them to entree credentials for GitHub and unreality services. Along pinch nan specifications astir Suno's music-scraping practices, they reportedly obtained its customer list. This is said to person accusation regarding hundreds of thousands of Suno customers, including email addresses and telephone numbers.
Suno confirmed nan hack successful a connection to 404 Media. A spokesperson, who besides noted that nan institution has systems that effort to forestall users from replicating artist's existing music, said:
As we person stated successful nationalist filings and disclosures, Suno's AI models person been trained connected publically disposable euphony files and related metadata accessible connected third-party websites connected nan unfastened Internet. In November of 2025, we wished that Suno had been nan taxable of a constricted information incident that was quickly contained. At nan time, we instantly conducted an investigation and verified that nan incident chiefly progressive outdated root codification that is nary longer successful usage astatine Suno and that nary delicate individual accusation was compromised. Importantly, Suno does not person entree to customers' afloat in installments paper numbers successful Stripe.
Based connected nan constricted quality of nan customer accusation believed to beryllium involved, we wished that individual notifications were not warranted nether applicable privateness laws.
