Hacker Exposes Suno Code and 100,000s of Customer Records as Scraping Details Surface
Updated
Updated · Engadget · Jul 15
Hacker Exposes Suno Code and 100,000s of Customer Records as Scraping Details Surface
2 articles · Updated · Engadget · Jul 15
Summary
Suno said a November 2025 breach exposed outdated source code and customer-list data tied to hundreds of thousands of users, after a hacker used a worm to steal an employee's GitHub and cloud credentials.
The stolen code reportedly showed Suno scraped millions of songs and lyrics from YouTube Music, Deezer, Genius and stock-music libraries, and used RSS feeds to pull in hundreds of thousands of podcasts.
Customer data obtained by the hacker reportedly included email addresses and phone numbers, though Suno said no sensitive personal information was compromised and it does not hold full credit-card numbers in Stripe.
The breach adds fresh detail to Suno's already contested training practices: the company admitted in a 2024 court filing that it scraped tens of millions of recordings and argues that use is protected as fair use.
That stance remains under legal pressure from US record-label litigation, even after Warner Music Group exited the case last year following a licensing deal with Suno.
A hack proved Suno scraped millions of songs. Can its 'fair use' defense survive the music industry's billion-dollar lawsuit?
After a breach exposed user data and copyright issues, is AI music giant Suno's $5.4 billion valuation about to collapse?
Suno AI’s Copyright Controversy: 61,000+ Songs at Stake, No Data Breach, and the Future of Music Law
Overview
As of July 2026, there has been no Suno data breach or hack exposing user information; instead, the controversy centers on major record labels accusing Suno of using vast amounts of copyrighted music to train its AI models without permission. These legal battles have not slowed Suno’s rapid growth, as the company recently secured significant investment and expressed excitement about industry collaboration. While labels seek to expand their complaints, arguing that denying them would reward Suno’s alleged actions, the core issue remains the scale of alleged copyright infringement and its impact on the future of AI music and intellectual property rights.