A new hack has reportedly revealed that generative artificial intelligence music creation platform Suno scraped the likes of Deezer, YouTube Music, and more in order to train its AI models.
The claims come by way of a report from 404 Media, who state they received the information from the hacker in question who “breached the company and shared data about Suno’s training libraries” with the publication.
Suno is a program which was founded in December 2023 and has massively risen in popularity since, largely due to the fact it produces AI-generated songs based on user-provided text or audio prompts.
Of course, the music it creates does not come from out of nowhere, and in fact, in 2024 lawsuit saw the company acknowledge that its its product had been trained on “essentially all music files of reasonable quality that are accessible on the open internet,” ultimately amounting to “tens of millions of recordings.”
Don't miss a beat with our FREE daily newsletter
The data provided to 404 Media includes source code which dates back to around “2023 and 2024”, and features both instructions and details about the content which was scraped.
The details outline that the likes of YouTube Music, Deezer, and Genius were scraped, as was stock music from libraries such as Pond5, Jamendo, Freesound, and the International Music Score Library Project. A number of podcasts were also scraped via numerous RSS feeds.
According to the code, around “2,013,545 music clips” had been scraped from YouTube Music, while another file states this amounts to roughly 113,879 hours of material.
That same file also reports data that features “17,615 hours of genius_hq,” “410 hours of free sound,” “19,514 hours of imslp,” “3,726 hours of jamendo,” “62,117 hours of pond5_music,” “12,287 hours of deezer,” “152,162 hours of ytm_tagged,” and “103 hours of musescore_lyrics.”
The publication points out this amounts to “at least decades worth of music,” while the hacker also claims to have accessed user information for hundreds of thousands of Suno’s customers, including payment information via Stripe.
The hacker in question told 404 Media they had no specific goal or intention for the hack, simply stating they “like to hack anything and everything.”
In a statement to the publication, a spokesperson for Suno confirmed ed that the company’s AI models had been trained on “publicly available music files”, as they had previously disclosed in the likes of their 2024 lawsuit.
“In November of 2025, we determined that Suno had been the subject of a limited security incident that was quickly contained,” they added. “At the time, we immediately conducted an investigation and verified that the incident primarily involved outdated source code that is no longer in use at Suno and that no sensitive personal information was compromised.
“Importantly, Suno does not have access to customers’ full credit card numbers in Stripe.”
News of this data scraping comes just weeks after it was revealed that thousands of songs by Australian artists were among the millions stolen for use in AI datasets.
The claims came from The Atlantic reporter Alex Reisner, whose ongoing investigations into the world of AI training data had uncovered massive datasets of songs which are reportedly being shared within the community focused around AI development.
According to Reisner, one of the four datasets uncovered include 12 million songs, another has nine million, while two others include more than 100,000 songs. While tracks by local artists such as AC/DC, Midnight Oil, Crowded House, Sia, Yothu Yindi, and others are included, so too are songs by international acts like The Beatles, Nirvana, Taylor Swift, and Madonna.
Just yesterday, Prime Minister Anthony Albanese outlined Australia’s approach to artificial intelligence, specifically pointing out that while this announcement was “about building Australians’ confidence and trust in AI and our nation’s capacity to manage it,” he clarified that the extent to which the Government shares information and resources has its limits.
“Let me make this crystal clear: not everything produced in Australia is up for grabs,” he explained. “Not at all. Australian writers, musicians, artists and journalists must retain ownership and control of their work. Our laws will spell that out, plain as day.”
“An artist’s creative endeavour is their work and their property. No company should use Australian books, music, art or news to build or train AI without the artist’s control.
“That includes the artist’s control of the price and value of their work,” he added. “Anything less, is theft. No country has got this right yet.”
