Trump Mobile Probes Website Leak of 27K Customer Records
If you are a customer of Trump Mobile, here’s what is being claimed, and what it would mean for you.
Security flaws in Trump Mobile's pre-order form for the T1 phone allegedly exposed personal data of 27,224 customers. An independent researcher discovered the issue and reported it to the company, which is investigating. No payment or SSN data was involved.
— from the group that posted this listing’s own leak-site posting. This is the group’s claim, quoted verbatim; it is not GalaxyWarden’s reporting and has not been independently verified.
Editor’s note: The claims described below originate from a ransomware group’s leak-site posting and have not been independently verified by GalaxyWarden. A listing of this kind is an assertion made by the group during an extortion attempt. It is not evidence that a breach occurred, and we report it as a claim rather than as a finding.
Trump Mobile customer?
See what’s already exposed about you — free, 15sWe check your email against known public breach records and the sites that publish your address, then show you what to do about each one. We don’t hold this company’s data. No account, no card.
Here for work? Check a company domain’s exposure.
A security vulnerability in the pre-order form for Trump Mobile’s T1 smartphone exposed the personal information of 27,224 customers, including names, physical addresses, phone numbers, and email addresses.
Public reporting indicates the flaw was identified by an independent security researcher who notified the company. Trump Mobile has confirmed it is investigating the incident and has taken steps to address the exposed pre-order database. Available reporting describes the breach as resulting from inadequate access controls on the web form, allowing unauthorized enumeration of customer records. No financial information, Social Security numbers, or payment details were involved. The company has stated that the affected system has been secured and that it is reviewing its broader data-handling procedures.
Advertisement
Know the day any company files a breach.
Every SEC 8-K Item 1.05 and state breach notification — dated, sourced, and delivered by email + a JSON API the day it posts. Track any company, not just the ones in the news.
GalaxyWarden Signals and RecentBreaches share common ownership.
For executives and high-net-worth families, the exposure of names, home addresses, and direct contact details creates immediate risks of targeted physical threats, phishing campaigns, and social engineering. Residential addresses paired with phone numbers and emails allow malicious actors to cross-reference public records, build detailed profiles, and initiate sophisticated impersonation attempts. In an environment where executives are already high-value targets, even a single leaked address can accelerate reconnaissance for executive protection teams or private family offices.
The doxxing and identity-chain implications extend further. Once an email or phone number surfaces in one breach, it can be correlated with usernames across social platforms, gaming services, and loyalty programs. This linkage creates persistent chains that adversaries can follow months or years later. Credential leaks of this nature frequently cascade into account takeovers, especially on gaming platforms where children’s accounts are often secured with the same family email addresses. A single exposed parent email can therefore compromise both adult and minor accounts, amplifying reputational and safety risks for the entire household.
What to do
- Run a DoxxScan to map every link between your handles, emails, phone numbers, and real-world identity, using the service’s identity-chain mapping across 15B+ breach records and 100+ platforms (72hr free trial of Warden).
- Rotate any password used on the Trump Mobile pre-order site wherever it has been reused, and immediately enable two-factor authentication through an authenticator app rather than SMS.
- Enable continuous DoxxScan monitoring so the next breach exposing your household data is detected and acted upon within hours rather than months.
- Cover the full household with DoxxScan family coverage, which extends protection to dependents and children’s gaming accounts that often chain back to the same parental addresses and emails.
- For executives and family offices, layer on hands-on remediation specialists who can execute targeted takedown requests across data brokers and exposed records.
Incidents like the Trump Mobile leak demonstrate that even medium-severity exposures of basic contact information can fuel long-term identity chains if left unmonitored. Executives and high-net-worth families benefit from services that combine continuous monitoring across 15B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage that includes children’s gaming accounts. DoxxScan by GalaxyWarden delivers exactly that layered defense. Start your DoxxScan trial today to close the gaps before the next breach surfaces.
What the free scan actually returns
Found on people-search siteswe remove these
These listings are live, public, and legal to remove — and removing them is what we do.
Found in breach recordsverifiedreported — unverified
Each record is labeled: confirmed breach data, or an attacker’s claim no one has verified.
Leaked data cannot be deleted from the internet — anyone claiming otherwise is lying. Broker listings can be removed. We do the second, and show you exactly what to fix from the first.
For security and vendor-risk teams: get an alert the day a vendor you watch files a breach with a US regulator or the SEC — the filing itself, dated and sourced, plus an API. GalaxyWarden Signals →
A staff address in a leak usually means a third party was breached, not you — check your own domain’s exposure. Exposure Monitoring →
Report details & sourcing
Related breaches
Everest ransomware claims breach of Liberty Mutual insurance data
The Everest ransomware group listed Liberty Mutual on its leak site, claiming theft of over 100 GB o…
Anywhere Real Estate 17K Records — February 2026
Real-estate brokerage Anywhere Real Estate disclosed a breach exposing PII for approximately 17,000 …
ICE/DHS Agents Personal Data Leak — January 2026
A whistleblower posted personal data on approximately 4,500 ICE/DHS agents to a doxxing site in Janu…