Trump Mobile data breach leaks information of over 3,600 users

A hacker group known as BYOD has claimed responsibility for a data breach affecting more than 3,600 users of Trump Mobile, a service associated with Donald Trump. The leaked information, which has appeared on the dark web, includes names, addresses, phone numbers, email addresses, and order details. Some affected users have already confirmed the accuracy of the leaked data.

Security experts suggest the breach occurred after hackers compromised an employee account at Liberty Mobile, the Florida-based operator that technically manages the service. The attackers reportedly exploited exposed subdomains and noted a lack of two-factor authentication (2FA) for account protection. The group claims to still have live access to the control panel.

There are indications that this may be a secondary sale of data. Another group, EndZone, previously claimed to have accessed a database of approximately 4,000 users from the same service, leading analysts to believe it may be the same initial compromise being resold in cybercrime circles. While credit card numbers were not included in the leak, experts warn that the combination of personal details and purchase history poses significant risks for cybercriminals.