Sunos alleged YouTube scraping exposed — and hackers got customer data too

a hacker breached suno via a supply chain attack on employee credentials, revealing internal evidence that the ai music generator scraped decades of audio from youtube music, deezer, genius, and podcast rss feeds. although suno defends its training as fair use, the specific act of bypassing youtube's scraping protections violates the dmca and tos, bolstering the lawsuit filed by major record labels. beyond the intellectual property implications, the breach exposed customer emails, phone numbers, and partial credit card details, a security incident suno did not disclose. this double-edged crisis highlights the growing legal and security liabilities for ai startups relying on scraped data.