Big trouble for Suno! A hacker breached the famous AI music generation company Suno and leaked its source code, exposing where Suno scraped music from to train its AI, as well as leaking data belonging to hundreds of thousands of Suno users

– A hacker named ellie.191 used a self-propagating data-stealing malware via npm packages named the Shai-Hulud worm to compromise a Suno employee’s GitHub and cloud accounts, gaining access to steal internal source code from 2023 and 2024.
– The leaked code reveals the massive scale of data scraping: 113,879 hours from YouTube Music (over 2 million clips), 62,117 hours from Pond5, 17,615 hours from Genius, 12,287 hours from Deezer, along with plans to scrape approximately 1 million hours of podcasts. This serves as clear evidence for the copyright infringement lawsuits previously filed against Suno by major record labels.
– The breach also leaked customer emails, phone numbers, and Stripe payment information. Suno stated that the incident occurred in November 2025 and was a minor issue with no full credit card numbers exposed, which is why they decided not to notify individual customers. However, the victims said they were completely unaware.

We will dive deeper into this story in a future video…..