Hackers claim to have hit thousands of Trump Phone customers as the bad news for golden smartphone fans continues

Welcome to Tech Radar club ! Hi , Your membership journey starts here.

Keep exploring and earning more as a member.

News, deals, reviews, guides and more…

News, deals, reviews, guides and more on the newest computing gadgets

Your membership perks Start exploring exclusive deals, expert advice and more

Unlock and manage exclusive Techradar member rewards.

Unlock instant access to exclusive member features.

Get full access to premium articles, exclusive features and a growing list of member rewards.

Straight Arrow News first reported the leak after reviewing the dataset, which contains names, email addresses, phone numbers, home addresses, and order details, and contacting people listed in it.

Trump Mobile has not responded to Straight Arrow, and neither the Trump Organization nor Liberty Mobile, the Florida-based operator behind the service, answered questions from The Register.

BYOD posted the data to its dark web leak site in late September 2026; a ransomware tracker cited by IBTimes UK dates the entry to September 29. The Register describes BYOD as a new ransomware-as-a-service operation, with Trump Mobile as only the third organization named on its site, though IBTimes UK notes that nothing published so far shows encrypted systems or a ransom demand.

The group’s account of how it got in is consistent in outline, even if the details differ slightly: BYOD told International Cyber Digest it compromised a Liberty Mobile employee with an infostealer, while Cybernews and Android Authority describe a remote access trojan.

Regardless of how they got onto the device, BYOD’s messaging indicates it pivoted from that foothold to exposed Trump Mobile subdomains, still has live access to a customer dashboard, and claims neither company used multi-factor authentication.

As proof, it sent Straight Arrow a dashboard screenshot showing one customer’s personal details, but said access has not been independently confirmed yet. The more damning part of this is that Trump Mobile’s answer to this has been “We have no team to handle this” and branding anyone who hacked it a terrorist, an exchange that BYOD alleges took place.

Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!

The data, however, has held up; Straight Arrow reached people who confirmed their details were accurate, Cybernews said its samples looked genuine and did not match earlier breaches, and PCMag reached three people in the file, one of whom was surprised to find an accurate record of canceling a 30-day unlimited plan.

BYOD may not even be the first to cash in: a separate group, EndZone, claimed on September 23 to have taken data on 4,000 Trump Mobile users, IBTimes UK reports, and security researcher Dominic Alvieri told The Register the EndZone dump “appears to be the same original breach.” BYOD denies a formal tie, with a representative telling PCMag that one member “just knows a few people behind EndZone,” according to IBTimes UK.

At launch in June 2025, Eric Trump promised that “Trump Mobile is going to revolutionize cell phones” – but what followed has been less revolutionary.

The “Made in America” promise disappeared from the website within two weeks. Shipping slipped from August 2025 to December, then March, then April, and in April the company rewrote its preorder terms to state that “a deposit is not a purchase.” In January, lawmakers urged the FTC to examine the brand’s marketing.

For consumers, there is a silver lining: No payment card data has been reported in the dump, so the immediate risk is phishing rather than direct fraud. This doesn’t completely solve the problem, however: names, phone numbers, home addresses, and order histories are exactly what scammers need to pose convincingly as a carrier or a delivery service.

Anyone who signed up, or merely started signing up, with Trump Mobile should treat unexpected messages about orders, refunds, or account problems with suspicion at a time when Trump Mobile continues to drag its feet on the matter, much like its May breach, when the company said it was still deciding whether to notify people. This time is a little different, however: it has said nothing at all.

Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.

Rahim Amir Contributor Rahim Amir is a UAE-based tech writer who enjoys building PCs as much as he enjoys writing about them. He has been professionally writing about PC hardware since 2023, focusing on buyer’s guides, hardware reviews, and sponsored content and features related to tech.

Having built hundreds of gaming PCs and being an avid gamer in his spare time, Rahim tends to have stronger opinions about hardware than most. This is particularly on display when he gets his way with powerful, but minimalistic RGB builds even as Small Form Factor (SFF) PCs come a close second.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.