Particle.news

Hackers Publish Personal Data of 3,615 Trump Mobile Subscribers

A group calling itself BYOD says it used a remote‑access trojan on a Liberty Mobile employee, signaling weak security and poor incident response at the service.

Overview

  • A dark‑web leak posted by BYOD contains records the group says belong to 3,615 Trump Mobile subscribers and multiple news outlets and researchers reviewed samples that appear genuine.
  • The published files reportedly include names, email addresses, phone numbers, home addresses, order histories, and plan details for active subscribers and some abandoned signups.
  • BYOD told reporters it gained entry by installing a remote‑access trojan on a Liberty Mobile employee device, then pivoted to Trump Mobile subdomains and claims live dashboard access.
  • Reporters contacted people listed in the dump who verified their information, and BYOD posted a statement saying Trump Mobile responded that it had “no team to handle this,” while the company has not issued a substantive public account.
  • The breach follows a May exposure of roughly 30,000 T1 preorder records and raises privacy, regulatory, and reputational risks for Trump Mobile, its MVNO partner Liberty Mobile, and affected customers including at least one Trump Organization IT executive.