Key Takeaways
- Suno AI music generator hacked, exposing data scraping claims.
- Hacker accessed source code and customer information.
- Legal disputes arise over copyright infringement.
Hacking Incident Overview
The AI music generator Suno has reportedly been hacked, as detailed in a recent report. The hacker claimed to have executed a supply chain attack in November, which allowed them to obtain an employee’s credentials. This breach provided access to source code that allegedly reveals how Suno scraped audio data from various platforms, including YouTube Music, Deezer, Genius, and stock music libraries.
Legal Implications
Suno has acknowledged that it trains its AI using “publicly available music files” found online. The company argues that it can utilize copyrighted material under the fair use doctrine. However, major record labels currently suing Suno contend that this practice violates the Digital Millennium Copyright Act (DMCA) by circumventing YouTube’s protections against data scraping, as well as breaching YouTube’s terms of service.
Customer Data Breach
In addition to accessing source code, the hacker reportedly obtained customer data, including emails, phone numbers, and partial credit card numbers stored in Stripe. Despite the severity of the breach, Suno did not inform its customers about the incident and described it as a “limited security incident that was quickly contained.”
Competitor Scrutiny
Udio, a competitor of Suno, has also faced accusations of scraping data from YouTube. Meanwhile, Google, the parent company of YouTube, is dealing with similar copyright infringement allegations from several major book publishers.