A newly formed cybercrime group calling itself BYOD has published personal records belonging to 3,615 Trump Mobile customers on its dark web leak site. The exposed dataset includes names, home addresses, phone numbers, email addresses, and order details, marking the latest operational setback for the Trump-branded wireless venture.
According to investigative reports and security researchers, the threat actors gained initial access by compromising a Liberty Mobile employee's device using malware or a remote access trojan. From that foothold, the group reportedly pivoted to exposed Trump Mobile subdomains and accessed a customer dashboard, highlighting vulnerabilities such as a lack of multi-factor authentication. While Trump Mobile has not publicly addressed the incident, affected individuals have confirmed the authenticity of the leaked information.
Although financial data such as credit card numbers appears to be absent from the published files, the exposed details create significant risks for targeted phishing and impersonation scams. Security analysts advise anyone who initiated a sign-up or placed an order with the service to remain highly vigilant regarding unexpected communications concerning account status, refunds, or delivery notices.
Comments