Trump Mobile has officially confirmed a customer data exposure that left the personal information of everyone who pre-ordered its gold-colored T1 phone visible on the open internet — while simultaneously revealing that the company’s claimed order numbers were dramatically overstated.
What Was Exposed
According to a TechCrunch report, the exposed data included:
- Customer full names
- Email addresses
- Physical shipping/mailing addresses
- Personal cell phone numbers
- Unique order identification numbers
Trump Mobile said there was no evidence that financial information or account content was part of the exposure, and attributed the leak to a third-party platform provider that supports “certain Trump Mobile operations.”
How It Was Discovered
The exposure came to light after a security researcher found the data publicly accessible online and alerted popular YouTubers Coffeezilla and penguinz0, both of whom had ordered T1 phones. The two creators then attempted to notify Trump Mobile directly — but received no response until the story went public.
Order Numbers Far Lower Than Claimed
The incident also exposed a significant discrepancy in Trump Mobile’s marketing claims. Based on the sequential order identifiers visible in the leaked database, researchers estimated that only approximately 30,000 phones were actually ordered — a far cry from the 590,000 preorders the company had previously touted.
Company Response
A Trump Mobile spokesperson told TechCrunch that the company’s own network, systems, and infrastructure were not compromised, placing the responsibility squarely on the third-party vendor. The company confirmed it is investigating the incident but has not yet clarified whether affected customers will receive formal breach notification.
Privacy Takeaway
The Trump Mobile exposure is a reminder that even high-profile consumer brands can be undermined by the security posture of vendors in their supply chain. Customers who pre-ordered T1 phones should be alert to phishing attempts, unsolicited calls, and physical mail scams using their exposed contact details.
Source: TechCrunch | CyberInsider
