Trump Mobile breach reportedly exposes names, addresses and phone numbers of 3,615 people

Trump Mobile may have exposed the personal details of 3,615 people in a data breach, according to The Verge, which cites reporting from PCMag and Straight Arrow News. The leaked dataset reportedly contains names, home addresses, email addresses, phone numbers and order information connected to users of the mobile service.

What was exposed

Reporters at PCMag and Straight Arrow News contacted several people whose details appear in the dataset and confirmed that the information was accurate, The Verge reports. The haul is also said to include records tied to Eric Brunnett, the chief information technology officer at The Trump Organization.

The leak may reach beyond paying customers. One person told PCMag that they never managed to complete a Trump Mobile sign-up, yet their details still ended up in the dataset after they gave the company an email address and phone number. That detail suggests the exposed pool could include prospective or abandoned registrations alongside active subscribers, making it difficult for individuals to know whether their information was held at all.

How the attackers reportedly got in

A hacking group calling itself BYOD has claimed responsibility for the incident. One member told PCMag that the intrusion began with a remote access trojan installed on an employee of Liberty Mobile, the carrier that powers Trump Mobile's network, and that this foothold led into Trump Mobile's data.

Straight Arrow News reports that BYOD also claims to have access to the backend of Trump Mobile's website. If accurate, that would mean the incident may not be a closed, one-time leak. The group's claims have not been independently verified, and The Verge says its request for comment to Trump Mobile went unanswered at the time of publication.

Why it matters

Names paired with home addresses and phone numbers are a proven starting point for phishing, identity fraud and SIM-swapping, and they create physical-world risks that a leak of email addresses alone does not.

There is also a targeting dimension. Trump Mobile is a politically branded product, so a verified list of its customers doubles as a rough proxy for political affiliation, with clear potential for harassment or intimidation regardless of what the attackers do with the data next.

The reported intrusion path is significant as well. If BYOD's account holds up, the breach did not require Trump Mobile's own infrastructure to be directly compromised; malware planted on a partner carrier's employee apparently did the work. Supply-chain compromises of this kind are difficult for a consumer brand to police, because every vendor's security effectively becomes part of its own attack surface.

Lastly, the presence of people who never finished signing up raises a data-retention question: why were contact details from an incomplete registration kept, and were those people ever informed? Until Trump Mobile responds publicly, the thousands of people in the dataset, and anyone unsure whether they are in it, are left without confirmation or guidance.