Cybercrime group BYOD breached the private user data of Trump Mobile customers and dumped it on the dark web. Trump Mobile is a mobile phone service founded by Donald Trump Jr. and Eric Trump advertises as “bringing American values back to wireless with a service that is simple, honest, and built around what truly matters.”
Today the data also appeared on leak sites including Distributed Denial of Service via a spreadsheet (.csv file) that directly references the hacker group BYOD. Leaked data includes the customer’s first and last names, email addresses, phone number, address, date they ordered the service, and calling plan.
This is not the company’s first data security problem. In May, YouTubers Coffeezilla and penguinz0 reported that a researcher had found a flaw in Trump Mobile’s preorder site that exposed customers’ names, addresses, and email addresses. Trump Mobile later confirmed that customer data had been exposed, including names, emails, mailing addresses, phone numbers, and order identifiers. The company blamed a third-party platform provider and said its own systems weren’t breached. It also said it was still deciding whether to notify affected customers.
Hurra!