Personal information linked to 3,615 people who used or attempted to join Trump Mobile has been published online by a cybercrime group, according to reporting that verified some records with affected individuals. The exposure appears to include people who never completed registration for the Trump-branded wireless service.
The files contain names, home addresses, telephone numbers, email addresses and order histories, Straight Arrow News reported after reviewing the material. The group, calling itself BYOD, posted the dataset on its dark web site in late September.
Trump Mobile, the Trump Organization and Liberty Mobile, the Florida-based operator behind the service, had not responded to reporters' questions at the time of publication. The companies have not publicly confirmed the scope of the incident or explained how the information was obtained.
The records appear to concern wireless-service accounts rather than purchases of Trump Mobile's gold-colored T1 smartphone. One person contacted by PCMag said they had supplied contact information but never successfully established an account, indicating that the affected group extends beyond paying subscribers.
Another person recognized an accurate record of canceling a 30-day unlimited plan. PCMag contacted three people listed in the file, while Straight Arrow News separately reached individuals who confirmed that their details were correct.
Cybernews said samples it examined appeared authentic and did not match previously known breaches. Those findings lend credibility to the exposed records, although they do not independently establish the attackers' account of how they entered the systems.
BYOD said it compromised a Liberty Mobile employee's device with malware and then accessed exposed Trump Mobile subdomains. It also claimed to retain access to a customer dashboard and alleged that the companies lacked multifactor authentication.
Straight Arrow News received a dashboard screenshot displaying a customer's personal information, but continuing access has not been independently confirmed. Reports have also differed over the specific type of malware allegedly used.
The group further claimed that it notified Trump Mobile and received the response, "We have no team to handle this." Its account of that exchange, including an allegation that the company called hackers terrorists, remains unverified.
No payment-card information has been reported in the published files. Nevertheless, contact details combined with order histories could help criminals create convincing messages about account problems, deliveries or refunds.
The number of records does not establish Trump Mobile's total active subscriber base. BYOD described the dataset as covering current and former users, and the inclusion of incomplete registrations further complicates any customer-count estimate.
A separate group, EndZone, claimed on Sept. 23 that it had obtained information on 4,000 Trump Mobile users. Security researcher Dominic Alvieri told The Register that its dump "appears to be the same original breach." BYOD denied a formal connection.
The incident adds to scrutiny of the venture launched by Donald Trump Jr. and Eric Trump in June 2025. Eric Trump said at the launch that "Trump Mobile is going to revolutionize cell phones."
The company subsequently removed its "Made in America" promise from its website, repeatedly postponed smartphone shipping and revised preorder terms to say that "a deposit is not a purchase." Lawmakers urged the Federal Trade Commission in January to examine the brand's marketing.
