Trump Mobile: Straight Arrow News says data posted by the BYOD group includes customers' names, emails, phone numbers, home addresses and order details, and people it called confirmed their details; Trump Mobile did not respond
A group calling itself BYOD posted data to its dark web leak site that it says came from Trump Mobile, the US mobile service owned by T1 Mobile under a brand licensed from the Trump Organization.
Straight Arrow News reported that the leak exposed personal data for 3,615 customers. Straight Arrow News reported on 5 October 2026 that its analysis of the data found first and last names, email addresses, phone numbers, home addresses and order details.
Straight Arrow says one customer it called confirmed he had paid Trump Mobile a $100 deposit, several other people it contacted confirmed their exposed personal data was accurate but denied being customers, and a Trump Organization employee listed in the data confirmed he had previously used Trump Mobile.
Straight Arrow says its review found no member of the Trump family among the customers, but the data includes Trump Organization CIO Eric Brunnett. Trump Mobile did not immediately respond to Straight Arrow's request for comment.
UPDATE 22 Oct 2026: cut the group's unverified claims about how it got in and about continuing access; this card now keeps only what Straight Arrow News says it verified (source: Straight Arrow News, 5 Oct 2026).
Correction (23 Oct 2026): the 3,615-customer figure was attributed to the BYOD group; it is Straight Arrow News's own reporting. (source: https://san.com/cc/trump-mobiles-latest-problem-hackers-just-released-customer-information/)
- Product
- Trump Mobile (T1 Mobile) customer and order data
- Versions
- n/a — incident; no CVE or product flaw identified
- Exploited in Australia?
- no
- Patch to
- Affected customers should expect targeted phishing that uses their real name, address and order details, and should verify any contact claiming to be from Trump Mobile through official channels. Telcos and resellers, including AU MVNOs: alert on bulk customer exports and require phishing-resistant MFA for staff and partner logins to customer dashboards.