Hackers have published the personal data of 3,615 Trump Mobile subscribers, the second confirmed data exposure to hit the venture since it began shipping devices in May.

According to Straight Arrow News, the breach was carried out days ago by a cybercriminal group calling itself BYOD. The group claims it warned Trump Mobile about the vulnerability and was told the company has no cybersecurity team. Trump Mobile spokespeople reportedly compared BYOD's actions to terrorism.

The group has since made the customer list public.

How did the attackers get in?

PCMag reports BYOD accessed the data through malicious software installed on the device of an employee at Liberty Mobile, the mobile virtual network operator (MVNO) that runs Trump Mobile's service. The attack therefore bypassed Trump Mobile's own systems entirely and entered through its host operator's staff.

Straight Arrow News reviewed the stolen records. The leak includes personal data of Eric Brunnett, vice president and chief information officer of the Trump Organization. It does not include data on members of the president's family.

What does this change for subscribers?

For the 3,615 affected customers, personal details are now in circulation. No figures on remediation, credit monitoring or regulatory notification appear in the reporting so far. The breach will add pressure on the company to explain its security arrangements, particularly its stated lack of a dedicated cybersecurity team.

It is the second exposure this year. Confidential customer information had already leaked in May, when Trump Mobile started shipping its handsets.

A troubled launch

Donald Trump Jr. and Eric Trump, the president's two eldest sons, launched Trump Mobile and unveiled the T1 phone in June 2025. The device went on sale at $499, with $100 reservations taken from roughly 600,000 people. First shipments were scheduled for August or September 2025.

The launch has attracted scrutiny beyond security. The company withdrew its claim that the T1 was "designed and manufactured with pride in the United States" from press materials and its website. CNN previously reported that the device closely resembles a Chinese phone sold at Walmart for under $200.

The MVNO operates through Liberty Mobile, a small Florida company, a structure that leaves network operations outside Trump Mobile's direct control — a fact now underlined by the breach vector through a Liberty Mobile employee device.

Whether Trump Mobile establishes a security team or faces regulatory consequences remains open; the company has announced neither.