The New York Times has opened a second front in its war against unauthorized AI training, this time targeting not an AI company but the infrastructure that feeds them. The newspaper, joined by other major publications, filed suit against Brave Software alleging the privacy-focused browser unlawfully scraped content to train AI models while simultaneously enabling users to bypass paywalls—a double assault on the business model that sustains professional journalism.

The case marks a significant expansion of publisher litigation strategy. Where previous suits targeted AI labs directly—OpenAI, Microsoft, Perplexity—this action goes after a browser company, arguing that Brave's architecture and features constitute willful facilitation of copyright infringement.

The scraping allegations

Brave has built its brand on blocking trackers and ads, positioning itself as the ethical alternative to Chrome's surveillance capitalism. But the Times alleges this privacy-first posture masked aggressive data harvesting of its own. The suit claims Brave systematically scraped publisher content to train AI features, doing so without authorization and in violation of the publications' terms of service.

The irony is pointed: a browser that markets itself on respecting user boundaries allegedly disrespected publisher boundaries at industrial scale. Brave's AI-powered search and summarization features—the very tools that differentiate it from competitors—may have been built on content the company had no right to use.

The paywall problem

Perhaps more threatening to publishers than the training data allegations is the paywall bypass claim. Brave has offered features that allow users to view content behind subscription walls, effectively neutralizing the revenue mechanism that funds newsrooms. The Times argues this isn't a neutral technical capability but an intentional feature designed to attract users by promising free access to premium content.

This puts Brave in legally uncomfortable territory. While browser extensions that circumvent paywalls exist in a gray zone, a browser company actively marketing such capabilities as a product feature invites direct liability. The distinction matters: Brave isn't a passive conduit but an active participant in the circumvention.

Our take

Brave built its reputation by promising to protect users from corporate surveillance. Now it faces allegations that it conducted its own form of extraction—harvesting publisher content for AI training while helping users avoid paying for journalism. If the Times prevails, the case could establish that browsers bear responsibility for the features they build, not just the data they transmit. For Brave, a company valued on its ethical positioning, the reputational damage may prove as costly as any judgment.