A hacking group says it broke into Trump Mobile's customer dashboard and published records on more than 3,600 people who signed up for the gold-colored T1 phone's wireless service.
The group, calling itself BYOD, posted names, email addresses, phone numbers, home addresses, and order details to a dark web leak site in late September. BYOD says it got in by infecting a Liberty Mobile employee's device with malware, then pivoted to exposed Trump Mobile subdomains it claims to still have access to. Neither company uses multi-factor authentication, according to BYOD, and the sample data checks out: several people in the file told reporters their details were accurate, including one canceled order. Trump Mobile's reported response, per BYOD, was that it has no team to handle the problem; the company has not commented publicly at all.
No payment card numbers appear to be in the dump, so this isn't a direct path to fraud. But names, addresses, and order histories are exactly what a scammer needs to impersonate a carrier convincingly, and a second group claimed a similar haul of 4,000 records in September that a researcher believes came from the same original breach.
This is the venture's second data exposure since its June 2025 launch, on top of shipping delays, a vanished "Made in America" claim, and a rewritten preorder policy. That's starting to look less like bad luck and more like a habit.