If you signed up for Trump Mobile, you may be part of an exclusive club of \u2026 ransomware victims. Criminals called BYOD claim to have broken into the Trump-branded mobile biz and leaked data belonging to 3,615 people, including names, email addresses, phone numbers, home addresses, and order details.<\/p>\n
BYOD is a new ransomware-as-a-service operation, and Trump Mobile is only the third organization posted on its data-leak site. According to the group\u2019s posted claim, after telling Trump Mobile that it had been breached, the wireless provider replied: \u201cWe have no team to handle this” and \u201cAnyone who hacks them are a terrorist.\u201d<\/p>\n
\u201cWell unfortunately for them, all 3615 customers and their PII, alongside telecom details are now up for grabs,\u201d the leak site says. \u201cFeel free to take a gander at it yourself, don’t be shy, we (and them) certainly aren’t stopping you.\u201d<\/p>\n
The hackers reportedly told<\/a> International Cyber Digest that they first infected a Liberty Mobile employee with an infostealer, and then accessed Trump Mobile via the MVNO. BYOD claims to still have access to Trump Mobile\u2019s systems, and told the publication that neither wireless provider used any form of multi-factor authentication.<\/p>\n Neither the Trump Organization nor Liberty Mobile responded to The Register\u2019s questions about the breach.<\/p>\n The data dump doesn\u2019t include any details about US President Donald Trump or his family members, according to Straight Arrow News, which first reported<\/a> the breach and verified some customers\u2019 information. This could mean that the Trump family doesn\u2019t eat its own dogfood.<\/p>\n The leak does, however, include personal information about Eric Brunnett<\/a>, vice president and chief information officer for the Trump Organization. Brunnett\u2019s LinkedIn profile says he oversees \u201call Information Technology and Information Security for all aspects of the Trump Organization.\u201d<\/p>\n Additionally, one customer contacted by Straight Arrow said he paid a $100 pre-order deposit last year for Trump Mobile\u2019s flagship smartphone, the T1, but never received a gold-colored device.<\/p>\n Another criminal group, EndZone, also claimed to have breached Trump Mobile and leaked a stolen dataset<\/a> a week before BYOD\u2019s post in what \u201cappears to be the same original breach,\u201d according to security sleuth Dominic Alvieri.<\/p>\n These aren\u2019t the fledgling mobile phone company’s<\/a> only security snafus.<\/p>\n