Suno snatched millions of songs from YouTube, Genius, and Deezer
Hacked files reveal AI music generator Suno was trained on millions of songs scraped from platforms like YouTube Music, Deezer, and Genius, fueling ongoing copyright lawsuits.
Intelligence analysis by Gemini 2.5 Flash Lite
A recent data leak suggests AI music generator Suno extensively scraped copyrighted music and lyrics from major platforms like YouTube, Deezer, and Genius for its training data, intensifying legal battles over fair use and intellectual property.
Imagine a robot that learns to make music by listening to millions of songs. This robot, called Suno, might have secretly copied songs from places like YouTube without asking permission, which is like stealing someone's homework to learn from. Now, people who own the songs are upset and suing Suno, while the robot's secrets about how it learned have been leaked.
Analysis
Allegations of Widespread Data Scraping
Hacked files reportedly expose Suno, an AI music generator, for systematically scraping millions of songs and lyrics from prominent online audio platforms. These platforms include YouTube Music, Deezer, and Genius, according to a report by 404 Media. This revelation offers a rare, albeit illicit, glimpse into the training data of an AI that has largely remained opaque about its data sources. The leaked materials, including source code and scraping instructions, allegedly detail methods for extracting audio files and even specifically targeting acapella versions of songs from YouTube to isolate vocal tracks. This alleged practice directly supports claims made in ongoing lawsuits against Suno.
Legal Battles and Fair Use Defense
Suno is currently embroiled in several lawsuits, notably one filed by the Recording Industry Association of America (RIAA), which accuses the company of using copyrighted materials for AI training. Suno's defense has centered on the doctrine of fair use, arguing that training on publicly available music from the open internet is legally permissible. However, the RIAA has further alleged that Suno actively circumvented YouTube's copyright protections through 'stream ripping.' The leaked data, provided by a hacker identified as 'ellie.191,' appears to corroborate these accusations, detailing the extent of Suno's data consumption, with files indicating hundreds of thousands of hours of YouTube Music and thousands of hours from other platforms like Deezer and Genius.
Security Breach and Customer Data
Beyond the training data revelations, the hacking incident also compromised customer information, including email addresses, phone numbers, and partial payment details via Stripe. While Suno acknowledged a security incident in November 2025, it claimed the compromised data was primarily outdated source code and that no sensitive personal information was accessed, thus not warranting individual customer notifications under privacy laws. However, some customers contacted by 404 Media confirmed their data was involved and expressed surprise at the lack of notification. This dual exposure of alleged copyright infringement and a data breach raises significant concerns about Suno's operational integrity and its respect for intellectual property and user privacy.
Key points
- Hacked files suggest AI music generator Suno trained on millions of scraped songs from YouTube, Deezer, and Genius.
- The data leak supports allegations in ongoing lawsuits claiming Suno used copyrighted material without permission.
- Suno has defended its practices under the fair use doctrine, but critics accuse it of circumventing copyright protections.
- The breach also exposed customer data, though Suno claims no sensitive information was compromised.
- The incident raises significant questions about AI training data ethics and intellectual property rights.
If Suno can successfully navigate these legal challenges and demonstrate a commitment to ethical data sourcing, it could pave the way for more transparent AI development in the music industry. This could lead to new models for compensating artists whose work contributes to AI training, fostering a more equitable ecosystem for creators.
The allegations of widespread copyright infringement and the security breach could severely damage Suno's reputation and lead to significant legal penalties, potentially stifling innovation in AI music generation. It also raises broader concerns about the unchecked data collection practices of AI companies and the difficulty of enforcing intellectual property rights in the digital age.
