Hackers have stolen and published personal information belonging to 3,615 Trump Mobile users, adding a security headache to the Trump-branded wireless venture.
According to TechRadar, the cybercrime group BYOD published the records on its dark web leak site in late September. Straight Arrow News reported the incident on 5 October 2026 after examining the dataset and contacting people listed within it.
The exposed information includes names, email addresses, telephone numbers, home addresses and order details, giving scammers useful material for convincing impersonation attempts. The published dataset contains no payment card information, though that offers little comfort when someone already knows your address.
Straight Arrow contacted several people who confirmed their personal details were accurate, while Cybernews researchers said samples appeared genuine. Those checks support the authenticity of some records, but they can’t verify every claim the attackers made.
BYOD says it gained entry by infecting an employee at Liberty Mobile, the Florida-based operator supporting Trump Mobile’s service, with malware. Reports differ on whether that involved an information stealer or a remote access trojan, leaving the precise intrusion method uncertain.
The group claims it retained access to a customer dashboard and supplied Straight Arrow with a screenshot containing personal information. That alleged continuing access has not been independently confirmed, so claims that attackers remain inside require more evidence.
BYOD alleges Trump Mobile responded to the breach notification by saying, “We have no team to handle this”. If accurate, that would suggest the patriotic sales pitch received considerably more attention than preparations for a predictable security incident.
The dataset includes people who never completed registration, extending the potential impact beyond paying subscribers. PCMag contacted one person who had supplied contact details while unsuccessfully trying to establish an account, only to discover those details had leaked.
Among those listed was Trump Organisation vice president and chief information officer Eric Brunnett, whose responsibilities include information technology and information security. Having the organisation’s own technology chief appear in a customer leak is an awkward addition to any corporate security briefing.
Trump Mobile did not immediately respond to Straight Arrow’s request for comment, leaving its initial report’s questions about notification and remediation unanswered. The published records include mobile-plan purchases, indicating the exposure involves wireless service and cannot be described solely as a T1 handset-order leak.
