---
title: Hacker Group Claims Breach of Trump Mobile Customer Data
description: Ransomware group BYOD posts 3,615 Trump Mobile customer records to its leak site; data includes a Trump Org exec. Stay alert for phishing scams.
canonical_url: https://codekeeper.co/ticker/ransomware-breach-trump-mobile-data-exposed
---

[Cyberattacks](https://codekeeper.co/ticker/tag/cyberattacks) | [Data breaches](https://codekeeper.co/ticker/tag/data-breaches)

# Hacker Group Claims Breach of Trump Mobile Customer Data

Ransomware group BYOD posts 3,615 Trump Mobile customer records to its leak site; data includes a Trump Org exec. Stay alert for phishing scams.

![Content Team](https://codekeeper.co/hubfs/_sized/Codekeeper_21_beeldmerkL-800.png)

By Content Team Oct 6, 2026

Share [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fransomware-breach-trump-mobile-data-exposed%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fransomware-breach-trump-mobile-data-exposed%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fransomware-breach-trump-mobile-data-exposed%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fransomware-breach-trump-mobile-data-exposed%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fransomware-breach-trump-mobile-data-exposed%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fransomware-breach-trump-mobile-data-exposed%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

ON THIS PAGE

### Want more insights like this?

Subscribe to our newsletter to get the latest software protection strategies delivered to your inbox.

By submitting your email, you consent to Codekeeper contacting you and agree to our [privacy policy](https://codekeeper.co/privacy-policy) .

A newly established ransomware group called BYOD claims to have stolen personal data from Trump Mobile customers, posting a file to its dark web leak site last week containing 3,615 records — names, addresses, phone numbers, emails, and order details. Straight Arrow News reported it on October 5, 2026, after reviewing the data and calling people listed in it. Several confirmed their details were accurate. Several others confirmed the same, then denied being Trump Mobile customers and hung up — so the file holds up for some entries without standing up all 3,615. Among those listed is Eric Brunnett, vice president and chief information officer at the Trump Organization. Straight Arrow found no Trump family members in the data. BYOD says it got in by infecting an employee at Florida-based Liberty Mobile with malware. The malware family, the infection method and the access path remain unestablished, and nothing in the reporting shows ransomware encrypted any systems. Trump Mobile is owned by T1 Mobile and licenses its branding from the Trump Organization. BYOD also claims it still has access to Trump Mobile's backend dashboard, backing that up with a screenshot of customer data. Whether that access is live is the open question. Trump Mobile had not commented at publication time. No passwords or card numbers have been shown as exposed, but customers should watch for phishing attempts and verify any unexpected outreach through official channels. Source: [Cybersecurity News](https://cybersecuritynews.com/trump-mobile-data-breach/)

Share this article [![Share on facebook](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Facebook.svg)](http://www.facebook.com/share.php?u=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fransomware-breach-trump-mobile-data-exposed%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Linkedin.svg)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fransomware-breach-trump-mobile-data-exposed%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20X.svg)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fransomware-breach-trump-mobile-data-exposed%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fcodekeeper.co%2Fticker%2Fransomware-breach-trump-mobile-data-exposed%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Mail.svg)](mailto:?subject=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fransomware-breach-trump-mobile-data-exposed%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fcodekeeper.co%2Fticker%2Fransomware-breach-trump-mobile-data-exposed%3Futm_medium%3Dsocial%26utm_source%3Demail) ![Copy link](https://codekeeper.co/hubfs/Codekeeper%202025/Icons/Blog%20-%20Copy.svg)

![blog_book_a_demo_cta_3x](https://codekeeper.co/hubfs/_sized/Codekeeper%202025/blog_book_a_demo_cta_3x-768x512.webp)

Have questions about protecting your software?

Our escrow experts are standing by to help.

[Book a free demo](https://codekeeper.co/book-a-demo)

YOU MAY ALSO LIKE

[Cyberattacks Hackers Clone Trusted Websites to Chain Chrome and Windows Zero-Days in Espionage Campaign Sep 23, 2026](https://codekeeper.co/ticker/china-hackers-exploit-chrome-windows-target-governments)

[Cyberattacks Fake Recruiters Infected 30,000 PCs in a $10.7M Crypto Theft Sep 21, 2026](https://codekeeper.co/ticker/fake-recruiter-scheme-north-korea-hackers)

[INC Ransomware Gang Leads Attacks Exploiting Critical SonicWall Flaws Aug 11, 2026](https://codekeeper.co/ticker/inc-ransomware-sonicwall-vulnerabilities-exploitation)

[Cyberattacks Hit Over 30 Minnesota Water Systems as Iranian Hackers Suspected Aug 11, 2026](https://codekeeper.co/ticker/minnesota-water-systems-cyberattack-iranian-hackers)