A security researcher obtained Suno's source code through compromised employee credentials and discovered the AI music generator scraped vast amounts of copyrighted audio from YouTube to train its models. The breach exposed internal documentation detailing how the company systematically harvested decades of music content without explicit permission from rights holders.

Suno, which raised $125 million at a $500 million valuation in May 2024, positions itself as a generative AI platform enabling users to create original songs through text prompts. The company has faced mounting legal pressure from the Recording Industry Association of America and major labels including Sony, Universal, and Warner Bros., which filed lawsuits in June alleging Suno trained models on copyrighted material without authorization.

The hacker's disclosure provides concrete evidence supporting those claims. The source code showed Suno built scraping infrastructure specifically designed to extract YouTube audio at scale, storing metadata about the source material. This directly contradicts Suno's public statements about training methodology and its defense against copyright claims.

The incident underscores the legal and ethical minefield surrounding generative AI training data. Competitors like OpenAI face similar scrutiny over their data sourcing practices, but documented proof of unauthorized scraping strengthens the case against Suno in ongoing litigation. The company now faces heightened reputational damage alongside legal exposure.

Suno did not immediately respond to requests for comment. The breach highlights vulnerability in AI companies' security posture as they scale rapidly to compete in the generative AI arms race. A single compromised credential enabled access to core source code containing smoking-gun evidence about the company's data practices.

The discovery adds fuel to broader regulatory conversations about AI training transparency and rights holder consent. As courts examine these cases, documented scraping operations become increasingly difficult to defend. Suno's legal defense now faces an uphill battle with internal documentation publicly available contradicting their prior statements