Suno is a U.S. company that develops an AI music generator producing songs from text prompts. It is a defendant in UMG Recordings v. Suno (AI music training data), the copyright suit brought by major record labels coordinated through the RIAA in the U.S. District Court for the District of Massachusetts (No. 1:24-cv-11611, filed June 24, 2024), which alleges its models were trained on copyrighted recordings (Source: courtlistener.com). Suno raised a $400 million Series D at a $5.4 billion valuation in June 2026 while the litigation continued (Source: techcrunch.com).
Training-data disclosure (July 2026 hack)
On July 15, 2026, hacked Suno source code became public showing that the company scraped YouTube Music (113,879 hours; over 2 million clips), Deezer, Genius, Pond5, Jamendo, IMSLP, and roughly 1 million hours of podcasts for training data. The hacker also accessed customer and Stripe payment data, and Suno confirmed a "limited security incident" dating to November 2025. 404 Media reported that the data corroborates the RIAA's stream-ripping allegations in its ongoing litigation against the company (Source: 404media.co).
Have I Been Pwned reported on July 21, 2026 that the November 2025 breach exposed personal information on more than 55.3 million people — names, addresses, phone numbers, purchases, and partial payment-card numbers drawn from Suno's Stripe account — alongside the source code. Suno had not publicly disclosed the breach or notified users as of that reporting; spokesperson Rachel Racusen confirmed the incident and did not dispute the user count (Source: techcrunch.com).
Suno did not notify affected users of the breach, stating that individual notices were not required under applicable privacy laws (Source: techcrunch.com).
German litigation
On July 31, 2026 the Regional Court of Munich ruled that Suno lacked the right to process songs by artists represented by GEMA, Germany's state-mandated licensing agency, and ordered the company to disclose revenue derived from the infringement; damages were not quantified and the verdict is appealable (GEMA v. Suno (Munich Regional Court)). GEMA had sued over Suno's use of freely available music on YouTube by artists including Alphaville. GEMA chief executive Tobias Holzmueller called it "a verdict of global significance"; Suno said it disagreed and would evaluate all options, including appeal (Source: reuters.com). More than 1,800 artists support the parallel U.S. class actions against Suno and Udio.
See AI Music Generation for the wider policy questions the category raises, and Recording Industry Association of America (RIAA) for the trade body coordinating the labels' action.
Relationships
- litigates: UMG Recordings v. Suno (AI music training data) — defendant in the RIAA-coordinated labels suit
- litigates: GEMA v. Suno (Munich Regional Court) — defendant in the German collecting society's action, decided against it on July 31, 2026
- related: AI Copyright — training-data provenance as a copyright-litigation question
- related: AI Copyright Litigation — Analysis — the RIAA-coordinated label suits against music generators
- related: Synthetic Media / Deepfakes — adjacent generative-media provenance questions