Overview
- Independent security researchers and YouTubers publicized a website exploit that allowed fake orders and scraping of the Trump Mobile preorder database, with initial public reporting emerging on May 21.
- The exposed fields included customer names, email addresses, mailing addresses, phone numbers and order identifiers while Trump Mobile says payment card data, Social Security numbers and message content do not appear to be involved.
- Leaked records cited by researchers suggest roughly 30,000 orders from about 10,000 unique customers, a far smaller figure than earlier estimates of roughly 590,000 deposits.
- Trump Mobile attributed the problem to an unnamed third‑party platform provider, said its core systems were not breached, and researchers reported the vulnerability was patched as the company evaluates whether to notify affected customers.
- The disclosure raises concrete safety and privacy risks for buyers, could draw FTC or consumer‑protection review, and renews scrutiny of Trump Mobile’s vendor practices and marketing claims about the T1’s origins.