Leaks Reveal Suno Fed Thousands of Hours of Deezer, YouTube and Pond5 Data Into Its AI

A hacker broke into AI music platform Suno and walked out with source code that documents, in precise detail, exactly where the company’s training data came from.

The breach was first reported by 404 Media, which reviewed the leaked files. It confirms what the music industry had been saying in courts since 2024.

The intruder claims to have used a piece of malware called the Shai-Hulud worm—named after the enormous sandworms in Frank Herbert’s Dune. Suno, one of the largest AI music generators online, lets users type a text description and receive a full song in seconds; building that capability required a substantial training dataset—a collection of audio files used to teach the model what different genres and styles sound like.

The leaked material consists of scraping instructions and internal logs from 2023 and 2024, offering a rare look at how those pipelines are actually assembled.

The dataset breakdown is specific. According to internal file comments reviewed by 404 Media, the training library included 113,879 hours of YouTube Music, 152,162 hours of tagged YouTube tracks, 62,117 hours from stock music library Pond5, 12,287 hours from Deezer, and 17,615 hours in a dataset labeled genius_hq, associated with material collected through Genius. The code also documented plans to download roughly 1 million hours of podcast audio via RSS feeds.

One internal file tracking YouTube Music ingestion alone logged 2,013,545 music clips. That’s millions of recordings covering decades of audio—and the appetite wasn’t limited to music.

The hacker claimed to have accessed records associated with hundreds of thousands of customers, including emails, phone numbers, and Stripe-related information. Suno disputes that sensitive personal information was compromised.

The company says it identified the incident in November 2025 and called it “limited.” Suno determined the exposure primarily involved outdated source code no longer in use and concluded that individual customer notifications weren’t required under applicable privacy laws. Users are only finding that out now, through news coverage.

Here’s the thing: Suno had already told anyone willing to read its own website that something like this was happening. Under California’s AB 2013 law—which requires AI companies to disclose their training practices—the company publicly acknowledged that its training data may include music “subject to intellectual property protection,” and listed the corpus at tens of millions of publicly available music audio files. What the hack adds is specificity: The legal filing was vague by design, and the leaked code is not.

The scope of AI music training was already becoming clear before anyone breached anything. In June 2026, The Atlantic published four searchable databases documenting music used to train AI models—one containing 12 million tracks, another with 9 million, and two more with around 100,000 each. You could look up your favorite artist before a hacker handed anyone source code.

The Recording Industry Association of America had alleged in a 2025 amendment to its original 2024 lawsuit against Suno that the company was ripping songs directly from YouTube—an accusation Suno contested under a fair use defense. The suit sought $150,000 per infringement incident. The hacked source code corroborates the RIAA’s central allegation.

Udio, which was targeted in a parallel lawsuit filed by the same major-label coalition, settled with Warner Music in November 2025 and is now transitioning to a licensed platform. Suno’s case with Sony and UMG remains active in federal court; the company’s valuation sits at $5.4 billion with around 100 million users on the platform.

Suno did not immediately respond to a request for comment by Decrypt.