Hack suggests AI music generator Suno scraped YouTube for training data

10:00 AM · July 15, 2026

A hacker who gained access to Suno's source code through a supply chain attack found evidence that the AI music generator scraped YouTube Music, Deezer, Genius, stock music libraries, and podcast RSS feeds to build its training data, according to TechCrunch. Suno describes the breach, which took place in November 2025, as a limited security incident that was quickly contained, and the company did not notify customers at the time, even though the hacker also obtained customer emails, phone numbers, and partial credit card information. The scraping detail matters beyond the security breach itself: circumventing YouTube's anti scraping protections would violate both the Digital Millennium Copyright Act and YouTube's own terms of service, and the finding strengthens arguments already being made in ongoing copyright lawsuits that major record labels have filed against Suno over its training practices. The episode adds a new, more concrete piece of evidence to a debate that has so far relied mostly on inference about how AI music generators source the material they learn from, and raises the stakes for Suno as it continues to fight in court over whether its training methods were lawful.