In November 2025, AI music generator Suno suffered a security breach: hackers exploited a supply chain attack to gain access to employee credentials and source code. Documentation confirmed the parsing of decades of audio from YouTube Music, Deezer, Genius, stock music libraries, and podcast RSS feeds without the consent of copyright holders. The incident exposed AI model training methods and created risks for brands working with influencer advertising and marketing campaigns.
How Suno Was Hacked and What Was Found in the Code
A hacker exploited a supply chain attack to compromise a Suno employee's credentials. With access gained, the attacker discovered evidence in the source code of systematic audio content parsing: YouTube Music, Deezer, the text portal Genius, commercial stock music libraries, and podcast RSS feeds. Beyond technical documentation, hackers accessed customer data in the Stripe payment system — email addresses, phone numbers, and partial bank card information.
The company called the incident a "limited security incident that was quickly contained" and did not notify users. The breach confirmed the suspicions of record labels that filed lawsuits against Suno: the company had acknowledged training its AI on "publicly available music files" on the internet, citing the doctrine of fair use.
DMCA Violations and Copyright Holder Conflicts
Major record labels litigating against Suno argue that intentional circumvention of YouTube's data parsing protection violates the Digital Millennium Copyright Act (DMCA). Additionally, it contradicts YouTube's terms of service. Suno's competitor, Udio, is also accused of parsing data from YouTube. Google, which owns YouTube, has faced similar allegations from major book publishers.
Parsing content from protected platforms to train AI creates legal risks not only for model developers but also for brands using such tools in marketing.
For influencer advertising and blogger ads, this means the need to verify the origin of content created with AI. A brand that published an integration featuring music generated by a model trained on unlicensed material risks receiving claims from copyright holders. The legitimacy of training data directly impacts media plan safety and campaign effectiveness.
Consequences for Brands and Influencer Marketing
The Suno breach exposed the problem of data source transparency for training AI content generators. Brands ordering influencer advertising or integrations with AI-generated music should require contractors to confirm the legality of the tools they use. Copyright infringement in advertising content will result in fines and reputational damage, especially if the campaign achieved significant reach.
When planning advertising campaigns with influencers, it's worth including requirements for license compliance of all content elements — from music to visual materials — in the brief. Working with an influencer agency that monitors compliance of integrations with legislation and ad labeling rules reduces legal risks. The ETC team specialists verify content compliance with labeling and copyright requirements at the stage of media plan approval, protecting the brand from third-party claims and ensuring predictable campaign results.
Frequently Asked Questions
Can AI-generated music be used in influencer advertising?
Yes, but only if the AI generator was trained on licensed data or the copyright holder's proprietary library. Using music from services that parse protected platforms like YouTube creates the risk of copyright infringement and legal claims against the brand.
How can I verify the legality of AI content for advertising integration?
Request documentation from the contractor or influencer about the AI model's origin and licenses for training data. Reliable content generators publish information about data source legality and provide guarantees protecting against copyright holder claims.
What penalties can a brand face for using unlicensed AI music in advertising?
Copyright holders can demand compensation for copyright infringement, content removal, and damages. Reputational harm from a public scandal can exceed direct financial losses, especially if the campaign achieved wide reach.
In Brief
- AI music generator Suno was breached in November 2025 through a supply chain attack — hackers gained access to source code and customer data.
- The code confirmed parsing of decades of audio from YouTube Music, Deezer, Genius, stock libraries, and podcasts for AI training without copyright holder consent.
- Record labels claim that circumventing YouTube's protection violates DMCA and the platform's terms of service.
- Brands using AI-generated content in influencer advertising risk copyright infringement claims if the generator was trained on unlicensed data.
- When planning media buying and influencer integrations, require confirmation of the legality of all content elements and compliance with ad labeling requirements.
Want to see where the market is heading before your competitors do? The ETC team builds a media strategy and media plan for your niche — with reach forecasts and KPIs fixed in the contract.
