Suno Hacked: Leak Exposes Extensive AI Music Data Sources

Suno's Data Breach and Its Implications

A hacker breached the AI music platform Suno in 2025, revealing that the company scraped approximately 113,879 hours of content from YouTube Music, 62,117 hours from the stock library Pond5, and 12,287 hours from Deezer, according to leaked source code files. These leaks detailed how Suno's training datasets were assembled, confirming earlier suspicions raised by the music industry regarding the potential copyright issues surrounding such data usage.

The hacker reportedly utilized malware known as the Shai-Hulud worm to infiltrate Suno's systems, capturing not only the training data instructions but also sensitive user information such as emails, phone numbers, and Stripe payment data belonging to hundreds of thousands of users. This revelation is significant as it underscores the ongoing challenges in balancing the use of copyrighted material for training AI systems and adhering to intellectual property laws.

"This breach sheds light on how AI platforms like Suno operate and raises important questions about the ethical sourcing of data used in machine learning,” reported 404 Media, the outlet that first covered the breach.

In light of these events, it is crucial to monitor how this breach impacts Suno's operations and whether any legal repercussions will arise concerning the improper use of protected content. The consequences could lead to stricter regulations around data sourcing for AI training purposes.