Hack of Suno AI Exposes Source Code and Customer Data

A hacker accessed Suno source code using an employee's credentials and obtained the company's customer list containing emails, phone numbers and Stripe payment details. The breach revealed explicit instructions in the code to scrape audio files from genius_hq, youtube_music, freesound, jamendo, imp and deezer. The instructions directed the system to filter out non-music content during scraping.

Suno also pulled material from the stock music libraries Freesound, Jamendo and the International Music Score Library Project. The 404 Media report published on July 15, 2026, showed that Suno trained its AI music generator on millions of songs and lyrics from YouTube Music, Deezer and Genius.

Suno has long acknowledged scraping millions of songs from the internet but has avoided revealing the contents of its training datasets and how they were acquired.

The exposed code confirmed the specific platforms and filtering steps used to build the training data.