A newly established ransomware group called BYOD claims to have stolen personal data from Trump Mobile customers, posting a file to its dark web leak site last week containing 3,615 records — names, addresses, phone numbers, emails, and order details. Straight Arrow News reported it on October 5, 2026, after reviewing the data and calling people listed in it.
Several confirmed their details were accurate. Several others confirmed the same, then denied being Trump Mobile customers and hung up — so the file holds up for some entries without standing up all 3,615. Among those listed is Eric Brunnett, vice president and chief information officer at the Trump Organization. Straight Arrow found no Trump family members in the data.
BYOD says it got in by infecting an employee at Florida-based Liberty Mobile with malware. The malware family, the infection method and the access path remain unestablished, and nothing in the reporting shows ransomware encrypted any systems. Trump Mobile is owned by T1 Mobile and licenses its branding from the Trump Organization.
BYOD also claims it still has access to Trump Mobile's backend dashboard, backing that up with a screenshot of customer data. Whether that access is live is the open question. Trump Mobile had not commented at publication time. No passwords or card numbers have been shown as exposed, but customers should watch for phishing attempts and verify any unexpected outreach through official channels.
Source: Cybersecurity News
