Hacker Reveals Suno Scraped Millions of Songs from YouTube Music and Deezer for AI Training

On July 15, 2026, 404 Media published a report sharing data that a hacker acquired from Suno after breaching the AI music company’s system. The data revealed that Suno scraped millions of songs and lyrics from various platforms to train its AI model.

Why it matters:

• Suno is currently involved in copyright infringement litigation with Universal Music Group and Sony Music via the RIAA. This development could essentially prove their claims.

• One of the RIAA’s central arguments is that Suno scraped copyrighted music from YouTube.

The sources:

• The hacked code showed that Suno scraped from streaming services YouTube Music, Deezer, and Genius; Stock music libraries such as Pond5, Jamendo, and Freesound; the International Music Score Library Project; and attempted to download over 1 million hours' worth of podcasts.

• For YouTube, the total was 2,013,545 music clips.

• All the material combined came out to decades of audio.

What they said:

• Suno: “As we have stated in public filings and disclosures, Suno’s AI models have been trained on publicly available music files and related metadata accessible on third-party websites on the open Internet. In November of 2025, we determined that Suno had been the subject of a limited security incident that was quickly contained. At the time, we immediately conducted an investigation and verified that the incident primarily involved outdated source code that is no longer in use at Suno and that no sensitive personal information was compromised.”