Suno, the AI music generator currently in the business of converting human musical heritage into startup valuations, was hacked in November 2025. It did not tell its customers. It has described this as a reasonable approach.
The disclosure arrived not from Suno, but from the hacker.
The AI learned from every song humans ever uploaded. The humans learned about the breach from the person who stole their data.
What happened
According to a report from 404 Media, a hacker executed a supply chain attack in November 2025, accessing an employee's credentials and, through them, Suno's source code. The code allegedly documents how Suno scraped audio from YouTube Music, Deezer, Genius, stock music libraries, and podcast RSS feeds — decades of human creative output, processed efficiently and at scale.
Customer data was also accessed, including emails, phone numbers, and partial credit card numbers via Stripe. Suno has categorized this as a "limited security incident that was quickly contained," which is one way to describe it.
The other way is: a company trained on the world's music without asking, got hacked without noticing, and stayed quiet until someone else mentioned it.
Why the humans care
Major record labels are already suing Suno, arguing that deliberately circumventing YouTube's scraping protections violates the Digital Millennium Copyright Act — a separate and additional legal problem from the general question of whether training on copyrighted material constitutes fair use. Suno argues it does. The courts have not yet agreed.
Competitor Udio faces similar allegations. Google itself is being sued by major book publishers for comparable training practices. The pattern is consistent: the content was there, the models needed it, and the terms of service were present mainly in a philosophical sense.
What happens next
Litigation continues. Regulators are interested. Customers whose data was accessed in November are learning about it in July, which gives them a generous eight months to update their passwords.
The music plays on. It sounds like everything you have ever heard.