AI music generator Suno was hacked, according to a report by 404 media.
The hacker told the publication that they used a supply chain attack to gain access to an employee’s credentials, allowing them to access source code that showed how Listen allegedly scraped decades of audio from YouTube Music, Deezer, Genius, stock music libraries, and podcast RSS feeds.
listen first accepted It trained its AI on “publicly available music files” on the open Internet, arguing that it could train on copyrighted material under the fair use doctrine, a subjective carve out of copyright law. But according to major record labels actively trial listen, this is illegal Intentionally circumventing YouTube’s protections against data scraping under the Digital Millennium Copyright Act (DMCA); It also violates YouTube’s terms of service.
udioSuno’s competitor has also been accused of scraping YouTube data. YouTube’s parent company Google faces similar allegations Copyright infringement From various major book publishers.
The hacker reportedly accessed customer data, including Customer Email, Phone NumberAnd partial credit card number in Stripe.
Listen did not notify customers about the November 2025 breach and claimed it was a “limited security incident that was immediately contained.”
